Table of Contents

​

​

UNITED STATES

SECURITIES AND EXCHANGE COMMISSION

WASHINGTON, D.C. 20549

​

FORM 10-K

​

​

For the fiscal year ended December 31, 2023

​

OR

​

​

Commission file number: 001-38869

​

HOOKIPA PHARMA INC.

(Exact name of registrant as specified in its charter)

​

​

Registrant's telephone number, including area code: +43 1 890 63 60

​

Securities registered pursuant to Section 12(b) of the Act:

​

​

Securities registered pursuant to Section 12(g) of the Act: None

​

Indicate by check mark if the registrant is a well-known seasoned issuer, as defined in Rule 405 of the Securities Act.  Yes  ☐  No  ☒

​

Indicate by check mark if the registrant is not required to file reports pursuant to Section 13 or Section 15(d) of the Act.  Yes  ☐  No  ☒

​

Indicate by check mark whether the registrant: (1) has filed all reports required to be filed by Section 13 or 15(d) of the Securities Exchange Act of 1934 during the preceding 12 months (or for such shorter period that the registrant was required to file such reports), and (2) has been subject to such filing requirements for the past 90 days.  Yes  ☒  No  ☐

​

Indicate by check mark whether the Registrant has submitted electronically; every Interactive Data File required to be submitted pursuant to Rule 405 of Regulation S-T (§232.0405 of this chapter) during the preceding 12 months (or for such shorter period that the registrant was required to submit such files).  Yes  ☒  No  ☐

​

Indicate by check mark whether the registrant is a large accelerated filer, an accelerated filer, a non-accelerated filer, a smaller reporting company, or an emerging growth company. See the definitions of “large accelerated filer,” “accelerated filer,” “smaller reporting company,” and “emerging growth company” in Rule 12b-2 of the Exchange Act.

​

​

If an emerging growth company, indicate by check mark if the registrant has elected not to use the extended transition period for complying with any new or revised financial accounting standards provided pursuant to Section 13(a) of the Exchange Act.  ☒

​

Indicate by check mark whether the registrant has filed a report on and attestation to its management’s assessment of the effectiveness of its internal control over financial reporting under Section 404(b) of the Sarbanes-Oxley Act (15 U.S.C. 7262(b)) by the registered public accounting firm that prepared or issued its audit report. ☐

​

If securities are registered pursuant to Section 12(b) of the Act, indicate by check mark whether the financial statements of the registrant included in the filing reflect the correction of an error to previously issued financial statements.  ☐

​

Indicate by check mark whether any of those error corrections are restatements that required a recovery analysis of incentive-based compensation received by any of the registrant’s executive officers during the relevant recovery period pursuant to §240.10D-1(b).  ☐

​

Indicate by check mark whether the registrant is a shell company (as defined in Rule 12b-2 of the Exchange Act).  Yes  ☐  No  ☒

​

Based on the closing price as reported on the Nasdaq Global Select Market, the aggregate market value of the Registrant's Common Stock held by non-affiliates on June 30, 2023 (the last business day of the Registrant's most recently completed second fiscal quarter) was approximately $71.7 million. Shares of Common Stock held by each executive officer and director and by each shareholder affiliated with a director or an executive officer have been excluded from this calculation because such persons may be deemed to be affiliates. This determination of affiliate status is not necessarily a conclusive determination for other purposes. The number of outstanding shares of the Registrant's Common Stock as of March 15, 2024 was 96,550,590 shares and 2,399,517 shares of Class A common stock outstanding, each $0.0001 par value per share.

​

Documents Incorporated by Reference

​

If the Registrant’s Definitive Proxy Statement relating to the 2024 Annual General Meeting of Shareholders (the “Proxy Statement”) is filed with the Commission within 120 days after the end of the fiscal year covered by this Annual Report on Form 10-K, then portions of the Proxy Statement will be incorporated by reference into Part III of this Annual Report on Form 10-K. If the Proxy Statement is not filed within such 120-day period, then the Registrant will file an amendment to this Annual Report within such 120-day period that will contain the information required to be included or incorporated by reference into Part III of this Annual Report.

​

​

​

​

​

​

Table of Contents

Table of Contents

​

​

​

2

Table of Contents

FORWARD-LOOKING STATEMENTS

This Annual Report on Form 10-K, including “Business” in Part I Item I and “Management’s Discussion and Analysis of Financial Condition and Results of Operations” in Part II Item 7, contains forward-looking statements which are made pursuant to the safe harbor provisions of Section 27A of the Securities Act of 1933, as amended, and Section 21E of the Securities Exchange Act of 1934, as amended (the “Exchange Act”). These statements may be identified by such forward-looking terminology as “may,” “should,” “expects,” “intends,” “plans,” “anticipates,” “believes,” “estimates,” “predicts,” “potential,” “continue” or the negative of these terms or other comparable terminology. Our forward-looking statements are based on a series of expectations, assumptions, estimates and projections about our company, are not guarantees of future results or performance and involve substantial risks and uncertainty. We may not actually achieve the plans, intentions or expectations disclosed in these forward-looking statements. Actual results or events could differ materially from the plans, intentions and expectations disclosed in these forward-looking statements. Our business and our forward-looking statements involve substantial known and unknown risks and uncertainties, including the risks and uncertainties inherent in our statements regarding:

3

Table of Contents

All of our forward-looking statements are as of the date of this Annual Report on Form 10-K only. In each case, actual results may differ materially from such forward-looking information. We can give no assurance that such expectations or forward-looking statements will prove to be correct. An occurrence of or any material adverse change in one or more of the risk factors or risks and uncertainties referred to in this Annual Report on Form 10-K or included in our other public disclosures or our other periodic reports or other documents or filings filed with or furnished to the Securities and Exchange Commission could materially and adversely affect our business, prospects, financial condition and results of operations. Except as required by law, we do not undertake or plan to update or revise any such forward-looking statements to reflect actual results, changes in plans, assumptions, estimates or projections or other circumstances affecting such forward-looking statements occurring after the date of this Annual Report on Form 10-K, even if such results, changes or circumstances make it clear that any forward-looking information will not be realized. Any public statements or disclosures by us following this Annual Report on Form 10-K that modify or impact any of the forward-looking statements contained in this Annual Report on Form 10-K will be deemed to modify or supersede such statements in this Annual Report on Form 10-K.

Investors and others should note that we announce material financial information to our investors using our investor relations website (https://ir.hookipapharma.com/), SEC filings, press releases, public conference calls and webcasts. We use these channels, as well as social media, to communicate with our members and the public about our company, our services and other issues. It is possible that the information we post on social media could be deemed to be material information. Therefore, we encourage investors, the media, and others interested in our company to review the information we post on the U.S. social media channels listed on our investor relations website.

​

Note Regarding Trademarks

This 10-K report includes trademarks and trade names that are the property of other organizations. Solely for convenience, trademarks and trade names referred to in this 10-K report appear without the ® symbols, but those references are not intended to indicate that we will not assert, to the fullest extent under applicable law, our rights, or that the applicable owner will not assert its rights, to these trademarks and trade names. We do not intend our use or display of other companies’ trade names or trademarks to imply a relationship with, or endorsement or sponsorship of us by, any other companies. All trademarks, trade names and service marks appearing in 10-K report are the property of their respective owners.

Unless otherwise indicated or the context otherwise requires, all references in this 10-K report to “HOOKIPA Pharma”, “HOOKIPA”, the “Company”, “we”, “our”, “ours”, “us” or similar terms refer to HOOKIPA Pharma Inc. and our consolidated subsidiaries.

Summary Risk Factors

Our business is subject to numerous risks and uncertainties, including those described in Item 1A “Risk Factors”. These risk factors include, but are not limited to the following:

4

Table of Contents

​

5

Table of Contents

PART I

Item 1.  Business

Overview

We are a clinical-stage biopharmaceutical company developing a new class of immunotherapeutics based on our proprietary arenavirus platform that is designed to target and amplify T cell and immune responses to fight diseases. Our replicating and non-replicating technologies are engineered to induce robust and durable antigen-specific CD8+ T cell responses and pathogen-neutralizing antibodies. We believe that our technologies can meaningfully leverage the human immune system for prophylactic and therapeutic purposes by inducing CD8+ T cell response levels previously not achieved by other immune therapy approaches.

We are building a proprietary immuno-oncology pipeline utilizing our replicating technology. Our oncology portfolio targets oncoviral cancer antigens and next-generation antigens and includes two primary programs in development: HB-200 and HB-700. HB-200 is in clinical development for the treatment of Human Papillomavirus 16-positive (“HPV16+”) head and neck cancers in a Phase 1/2 clinical trial. HB-700 is in preclinical development for the treatment of KRAS mutated cancers, including lung, colorectal and pancreatic cancers. We also have a third oncology program, HB-300, targeting self-antigens for the treatment of prostate cancer, which the Company paused further development in January 2024, to conserve capital and ensure pipeline success and operational efficiency.

Our strategic priority is the development of our oncology portfolio, most importantly the advancement of our HB-200 program, and we expect to initiate a randomized Phase 2/3 trial in 2024. Additionally, we are developing infectious disease therapies in partnership with other companies. Our Hepatitis B (“HBV”) program, HB-400, and our Human Immunodeficiency Virus (“HIV”) program, HB-500, are being developed in a partnership with Gilead.

2023 Highlights

In 2023, we executed on several key areas across our pipeline. The highlights include:

Oncology:

6

Table of Contents

Infectious Disease: Gilead-Partnered Programs

Financial Highlights:

Significant Recent Events

On January 29, 2024, we provided an update on our business priorities and oncology partnership programs. We announced that we will focus our resources in two strategic areas: (1) the clinical development of a randomized trial for our HB-200 program in HPV16+ head and neck squamous cell carcinoma (“HNSCC”) and (2) our two Gilead-partnered infectious disease cure programs for HBV and HIV. As part of our strategic refocus, which we announced in January 2024, we have paused development activities related to HB-300 and most of our preclinical research activities.

We also announced in January 2024 that we received notification from Roche of their decision to terminate the collaboration and licensing agreement for our HB-700 program in KRAS mutated cancers. We have met all go-forward criteria under the agreement and remain eligible for a final milestone payment associated with an IND submission. Effective April 25, 2024, we will regain full control of the associated intellectual property portfolio and have full collaboration and licensing rights for this program.

Additionally, we announced a reduction in our workforce by approximately 30% and rebalance in our cost structure in alignment with the reprioritization of our programs, and both are expected to be implemented and substantially completed by the end of the first quarter of 2024. As of December 31, 2023, we had $117.5 million in cash,

7

Table of Contents

cash equivalents and restricted cash, and we believe that the planned reductions will help conserve resources and better align our organization in direct support of late-stage clinical development efforts.

Leadership

We are led by a team of highly experienced executives, clinicians, and scientists with focused and translational expertise in oncology, immunology, vaccinology, clinical development, and commercialization. Our Chief Executive Officer, Joern Aldag, was previously the Chief Executive Officer of uniQure, a company that under his leadership pioneered the approval of the first gene therapy product. The fundamental discoveries underlying our arenavirus platform originated with our co-founders, Nobel laureate Rolf Zinkernagel, M.D., and Daniel Pinschewer, M.D., an internationally recognized arenavirus expert who serves as Scientific Advisor to our Chief Executive Officer.

Our Pipeline

We are leveraging our modular arenavirus platform to develop the following product candidates for multiple cancers and infectious diseases:

Platform

Our differentiated platform is based on engineered arenaviruses that are designed to activate the natural immune defense mechanism to trigger potent and target-specific T cell and B cell immunity. Arenaviruses have been used for decades as a preclinical tool to study CD8+ T cell responses. Our co-founder, Rolf Zinkernagel, was awarded a Nobel Prize in Physiology or Medicine for his arenavirus-based work on how CD8+ T cells recognize virus-infected cells. We believe that arenaviruses have several key advantages that give them the characteristics of an optimal immunotherapy, including:

We believe we are the first to reengineer arenaviruses for therapeutic purposes. Our systemic and reproduceable approach features two technologies capable of delivering disease-specific antigens for the prevention and treatment of disease. Our non-replicating technology is designed to induce a strong immune response for prophylactic and therapeutic use against infectious disease. Our replicating technology is engineered to produce an even more powerful immune

8

Table of Contents

response, which we are currently exploring in oncology indications. In preclinical studies, our replicating technology was able to reprogram the immune system such that more than half of the body’s CD8+ T cells focused on a specific cancer self-antigen target without observed serious adverse events. We observed the ability of HB-200 monotherapy to induce robust, high-quality and durable antigen-specific CD8+ T cell responses in our HB-200 clinical trial in human patients. We have designed our platform to be modular in nature to allow substitution of antigens to target a broad range of infectious diseases and cancers. We have a robust intellectual property portfolio for our suite of arenaviruses with exclusive rights in issued patents and patent applications related to our non-replicating technology and exclusive and joint rights in issued patents and patent applications for our replicating technology. We believe the breadth and depth of our intellectual property portfolio is a strategic asset that has the potential to provide us with a significant competitive advantage.

We believe that our arenavirus platform approach gives us a unique and powerful way to tap into the biology of the immune system and reprogram it by instructing APCs, such as dendritic cells, to express antigens that direct the immune system to the desired targets. Our product candidates are designed to deliver full length proteins to activate T cells and B cells to produce a robust immune response through natural means, avoiding the use of artificial ex vivo constructs such as CAR-T cells and related approaches that bypass the immune system’s normal control mechanisms. Although these latter approaches have shown clinical activity, they have the potential to cause life threatening side effects, including cytokine release syndrome. In addition, we believe that our immunotherapy approach is simpler, more straightforward and cost effective to manufacture and administer than CAR-T cells or other patient derived cellular approaches.

Background

The immune system is designed to protect the human body from infections and cancers. Infections can be generally defined as the proliferation of foreign microorganisms such as bacteria, viruses, and parasites in a patient’s body resulting in clinical manifestations of disease. Cancer can be generally defined as the uncontrolled proliferation of native cells resulting in disease. In both cases, the immune system recognizes and destroys microorganisms, infected cells and cancers by targeting specific proteins, or antigens, as well as their immunogenic sub parts, which are referred to as epitopes.

The innate immune system is the body’s first line of defense and enables a rapid, short-lived and nonspecific response. In contrast, the adaptive immune system utilizes highly specialized immune cells called lymphocytes that have been selected to recognize specific foreign antigens. Although it takes longer to mobilize, the adaptive immune system is capable of providing long term, more effective immunity against specific pathogens by being able to recall prior antigen exposure and mounting a very powerful and specific response.

In order for the adaptive immune system to function effectively, the innate immune system must first present disease specific antigens to a subset of lymphocytes called T cells in order to “instruct” the T cells as to which antigen they must recognize. The T cell population consists of CD8+ T cells, those that kill virus infected and cancer cells by releasing cytotoxic proteins, and CD4+ T cells that help or stimulate additional parts of the immune system such as B cells that produce antibodies. Antigen presentation to T cells is mediated by APCs, such as dendritic cells.

Our Technology Platform

Our proprietary platform is based on engineering arenaviruses to carry and deliver virus-specific or tumor-specific genes to APCs, such as dendritic cells, which are natural activators of CD8+ T cells. Arenaviruses have been used for decades to stimulate potent CD8+ T cells responses in preclinical research. Our co-founder, Rolf Zinkernagel, was awarded a Nobel Prize in Physiology or Medicine for his arenavirus-based work on how CD8+ T cells recognize virus infected cells.

Arenaviruses have several important advantages, which we believe represent the optimal characteristics for an antigen specific immunotherapy. Specifically, they:

9

Table of Contents

The arenavirus family is comprised of over 30 currently known species, many of which we believe have potential prophylactic and therapeutic applications. We believe we are the first to reengineer arenaviruses for the prevention and treatment of disease. We have created two types of viral technologies capable of delivering disease specific antigens: a replication defective vector, and a replication competent but attenuated vector.

Our non-replicating and replicating technologies utilize both a Lymphocytic Choriomeningitis Virus (“LCMV”) and a Pichinde Virus (“PICV”), two species of arenaviruses, as a backbone of the product candidates we are developing. LCMV is principally carried and secreted by wild mice, with human infection being secondary to such exposure and uncommon. Approximately 2% to 5% of individuals in industrialized countries have circulating antibodies against LCMV, which indicates prior exposure in these individuals. Individuals infected with LCMV typically remain asymptomatic or may present with a nonspecific and self-resolving flu-like illness. PICV is principally carried and secreted by Colombian rice rats (oryzomys albigularis) and is a nonpathogenic virus that does not cause disease in humans.

Non-Replicating Technology Overview

Our proprietary non-replicating technology disables arenavirus replication by substituting one of its four structural genes with the gene for a desired antigen. The modified, non-replicating arenavirus is able to directly infect individual APCs, such as dendritic cells and deliver proteins that serve as antigens to activate the immune system but is not able to replicate and infect additional cells in the body.

Advantages of Non-Replicating Technology

Based on the preclinical and clinical data that we have generated to date, we believe our non-replicating technology supports the benefits of our arenavirus platform approach. Specifically, in preclinical studies and clinical trials this technology has demonstrated that it is well tolerated and has the following additional benefits:

Robust CD8+ T cell Response as Well as Pathogen Neutralization Response. Our non-replicating technology is designed to induce a robust CD8+ T cell and pathogen neutralizing response to fight disease. We believe our technology results in a prophylactic and immuno-therapeutic approach with potential for greater potency than existing prophylactic treatments.

Immunological Memory and Protection Against Challenge. Our non-replicating technology has shown the ability to trigger a robust and long term CD8+ T cell response of at least 12 months in humans. Furthermore, in various animal models non-replicating vector immunization resulted in protection against infectious challenge.

Reduced Neutralization of Vector Specific Antibodies. The reduced neutralization of vector specific antibodies facilitates repeat administration.

Replicating Technology Overview

10

Table of Contents

Our proprietary replicating technology was designed to provide the beneficial properties of our non-replicating technology but to induce an even more robust immune response. Unlike naturally occurring arenaviruses which have two genomic segments, our replicating constructs were engineered to have three segments to allow for the introduction of genomic space in which to insert additional target antigens of choice. As a result of the larger genome, the virus’ ability to replicate is reduced (attenuated).

Advantages of our Replicating Technology

Based on our preclinical data, we believe our replicating technology shows all the benefits of the non-replicating technology and the following additional benefits:

Quantitatively: Even More Robust CD8+ T Cell Response. In animal studies, our replicating technology has shown to induce a CD8+ T cell response that directs more than 50% of a body’s T cells, which is approximately ten times greater than the response induced by our non-replicating technology, to focus on a single target of choice. Similar data have been demonstrated in our Phase 1/2 clinical study of HB-200. We believe our technology results in an immunotherapeutic approach with potential for greater potency than existing therapeutic treatments.

Qualitatively: Immunological Memory and Protection Against Challenge. Our replicating technology has shown the ability to trigger a long term CD8+ T cell response. Furthermore, in various animal models replicating immunization resulted in complete tumor remission after a single treatment and protection against a cancer re-challenge months after primary treatment.

The additional benefits noted above are attributable to our technology’s ability to replicate. This allows it to infect not only APCs, such as dendritic cells, but also lymphoid stromal cells, which are immune support cells found in lymph nodes and the spleen. Infection of lymphoid stromal cells results in the release of a signaling protein which further drives the proliferation and differentiation of CD8+ T cells. This mechanism has the potential to generate ten fold more antigen specific CD8+ T cells as compared to viral delivery systems that are unable to trigger this pathway. Furthermore, we believe our replicating technologies may also be synergistic with other approved immuno-oncology agents and currently are conducting a clinical trial of our replicating technology in combination with checkpoint inhibitors.

In additional preclinical models, including a mouse melanoma model and a cancer testis self-antigen cancer model, we again demonstrated the ability of sequential administration of replicating PICV and LCMV constructs to direct up to 50% of a body’s T cells to focus on a single target of choice.

Advantages of sequential administration of replicating PICV and replicating LCMV

We have observed increased antitumor activity and survival of animals that received sequential administration of replicating PICV and replicating LCMV in a preclinical mastocytoma model. In this model, tumor cells expressed a cancer testis self-antigen known as P1A. In the absence of treatment, tumors grew rapidly and most of the mice died by day 25. When given a first dose with a replicating LCMV P1A vector, followed by a second dose with the same vector, there was a delay in tumor growth of approximately ten days and an increase in survival rates, with some mice surviving to almost 100 days (left panel below). In contrast, mice that were treated first with replicating PICV P1A followed by a second dose with a different arenavirus, replicating LCMV P1A, had an average tumor growth delay of approximately 25 days and in 18% of the mice the tumors were eliminated, and they survived beyond the 160 days of the study. Furthermore, and as seen in our other studies, mice with eliminated tumors demonstrated resistance to a tumor rechallenge (right panel below).

11

Table of Contents

Figure: Bonilla, W. et al. Heterologous arenavirus vector prime-boost overrules self-tolerance for efficient tumor-specific CD8 T cell attack. journal.ppat. 100209. Cell Reports Medicine

Our Product Candidates

HB-200 Program for the Treatment of HPV16+ Cancers

The HB-200 program is our first program in oncology and the first clinical exploration of our replicating arenaviral vector-based technology. The HB-200 program is composed of potential therapeutic agents for people with cancers caused by the Human Papillomavirus (“HPV”), specifically HPV16+.

All of our current product candidates are alternating, dual-vector arenaviral immunotherapies. HB-200 is a targeted dual vector arenaviral-based immunotherapy that uses alternating sequential injections of a LCMV vector and a PICV vector, both expressing the E7E6 fusion protein specific to HPV16+ cells. The two components of our HB-200 program are referred to as HB-201 (LCMV) and HB-202 (PICV).

HPV-Positive Cancers

HPV is estimated to cause about 5% of cancers worldwide, including approximately 99% of cervical cancers, up to 60% of HNSCC, 70% of vaginal cancers and 88% of anal cancers. While most infections with HPV are cleared from the body with no lasting consequences, in some cases, HPV DNA becomes integrated into chromosomal DNA. When host cells take up this DNA, they express the HPV E6 and E7 proteins. The expression of these proteins can lead to alterations in cell cycle control, which in turn predisposes these cells to become cancerous.

HPV infection is linked to several cancer types, including HNSCC which is now the 8th most common cancer affecting men in the United States (Siegel et al. 2023). The high incidence rate of HNSCC is largely due to a rising epidemic of oropharyngeal squamous cell carcinoma (“OPSCC”) associated with HPV (Price & Cohen 2012). The median overall survival (“OS”) for R/M HNSCC remains less than 15 months despite modern chemotherapy, targeted agents, and recent immunotherapy. The high-risk genotype HPV 16 accounts for 88% of HPV+ OPSCC cases in the United States (Chaturvedi et al. 2011) and for more than 50% of HPV+ cases found in other head and neck anatomical locations (Abogunrin et al. 2014; Vokes et al. 2015). In 2023, an estimated 54,540 new cases of head and neck cancers were diagnosed in the United States alone, with anticipated deaths estimated at 11,580 (Siegel et al. 2023).

While there is no T cell therapy approved for HNSCC, retrospective analyses have shown that patients’ outcomes are improved for those with high levels of CD8+ T cells in tumors as compared to patients with low levels. In many cases, the survival rate of patients with higher levels is more than double that of patients with lower levels of CD8+ T cells.

12

Table of Contents

Our Solution: HB-200 Program

HB-200 alternates the administration of both HB-201 (LCMV) and HB-202 (PICV) attenuated viral vectors, which on their own are replicating-based therapeutics expressing a non-oncogenic, but highly antigenic, E7E6 fusion protein from HPV16. We have observed strong immunogenicity and robust antitumor activity in mouse models for LCMV alone as well as for the sequential administration of LCMV and PICV.

Relevance of E6 and E7 as Tumor Antigens

Integration of HPV viral sequences into the genome of a cell can result in the introduction of E6 and E7 oncoproteins. They are present in cells that become cancerous and play a critical role in interfering with cellular processes and interrupting normal tumor suppressor functions.

Profiling of immune cells isolated from patients with HPV16+ tumors has identified E6 and E7 specific T cells, indicating that the E6 and E7 proteins are immunogenic, meaning that they trigger antigen specific CD8+ T cell responses. Because both E6 and E7 are highly expressed in tumor cells and are absent in normal cells, they are ideal candidates for use as targets of tumor directed active immunization.

HB-200 Clinical Trial

HB-200 is being evaluated in an ongoing Phase 1/2 clinical trial for the treatment of HPV16+ cancers.

This trial is currently enrolling participants in Phase 2, evaluating HB-200 therapy in combination with pembrolizumab in the first line setting of HPV16+ PD-L1+ oropharynx cancer.

Previously, the trial has, in multiple arms, explored several dose levels and administration regimens across multiple HPV16+ cancer indications. The Company has published interim data readouts at key scientific conferences dating back to 2021. Interim data readouts from 2021 to 2022 have shaped further the study design and protocol.

Most recently, there has been data published on two key components of the trial:

Clinical Results: HB-200 Monotherapy in Second or Later-Line Setting

In November 2023, we presented updated Phase 1 monotherapy data for HB-200 in the second or later-line R/M setting of HPV16+ cancer at the Society for Immunotherapy of Cancer annual congress (Abstract #679).

As of March 31, 2023, in the Phase 1 portion of the study, 93 patients with any HPV16+ cancer (72 HNSCC and 21 non-HNSCC) were enrolled to receive HB-200 therapy (LCMV 1-vector therapy or PICV/LCMV alternating 2-vector therapy). Patients were heavily pretreated with a median of three prior anticancer systemic therapies (range 1-11). The recommended phase 2 dose (“RP2D”) and regimen for HB-200 monotherapy was previously determined to be alternating 2-vector therapy IV at dose level 3 (PICV 1×107 RCV FFU, LCMV 5×107 RCV FFU). The reported efficacy and clinical biomarker data focused on the 41 patients with HPV16+ HNSCC treated with HB-200 alternating 2-vector therapy, especially 29 patients with HPV16+ HNSCC treated with HB-200 alternating 2-vector therapy at the RP2D (DL3) or one dose lower than the RP2D (RP2D-1, DL2).

13

Table of Contents

Safety and Tolerability

Across all patients treated, the safety profile with HB-200 monotherapy was generally favorable. The majority of reported adverse events (“AEs”) were mild to moderate (Grade 1 or Grade 2) with the most common AEs being flu-like symptoms. Across the 93 patients treated in Phase 1, 11.8% of patients reported grade ≥3 treatment related adverse events (“TRAEs”), 2.2% of patients had treatment discontinuation due to TRAEs, and no treatment-related deaths occurred, as shown below. Safety data were generally comparable to checkpoint inhibitor monotherapy in the later-line HNSCC setting.

Clinical Activity

The intent to treat population (“ITT”) of 29 patients with HPV16+ HNSCC were treated at the RP2D and RP2D-1 of HB-200 alternating 2-vector monotherapy, with 27 patients evaluable with ≥1 tumor efficacy scan. Importantly, HB-200 demonstrated clinical activity and tumor shrinkage as a monotherapy in a very difficult to treat and immune checkpoint resistant patient population that we believe has the potential to be best-in-class. Among the evaluable patient population, the disease control rate was 44% (1 confirmed partial response “PR” and 11 stable disease “SD”), and 33% of patients had tumor shrinkage in the target lesions (Figure 1). Overall survival data is still maturing with a median OS of ~13 months and a median follow-up time of 6.3 months for the 29 patients as of August 7, 2023. Two patients (patient #1 and #2) had paired biopsies available. High levels of circulating E6-E7–specific CD8+ T cells and increased tumor infiltration of CD8+ lymphocytes were seen in these 2 patients, who also demonstrated clinical benefit / disease control (Figures 1-4).

​

14

Table of Contents

Biomarker and Translational Results

Augmentation of tumor-specific T cells was observed in 100% of patients tested across all 4 dose levels (N = 35 tested out of 41 HNSCC patients receiving HB-200 alternating 2-vector therapy) (Figure 2B):

Figure 2. HPV16 E6-E7–specific T cell responses in HNSCC patients treated with HB-200 alternating 2-vector therapy.
A. Baseline and peak IFN-γ+ HPV16 E6-E7 T cell response measured by ICS. Peak responses were typically observed post 2 doses of HB-200 (N = 35/41 HNSCC patients receiving HB-200 alternating 2-vector therapy across DL1-4).
B. Box plots are representing IFN-γ+ HPV16 E6-E7 T cell response measured by ICS per DL (N = 35/41). Box and whiskers represent minimum, maximum and median. DL1 = PICV 1×106, LCMV 5×106 RCV FFU; DL2 (RP2D-1) = PICV 1×107, LCMV

15

Table of Contents

5×106 RCV FFU; DL3 (RP2D) = PICV 1×107, LCMV 5×107 RCV FFU; DL4 = PICV 1×108, LCMV 5×106 RCV FFU. Patients from DL2 & DL3 with available PBMC samples are highlighted (N = 26/29)
C. Representative pseudo-color plots (Patient #1) with the frequencies of double-positive IFN-γ+ TNF-α+ cells gated on CD8+ T cells at baseline and post 2 doses of HB-200.

Importantly, HB-200 showcased durability and functionality of tumor-specific CD8+ T cells (N = 35/41 HNSCC patients receiving alternating 2-vector therapy) and infiltration of CD8+ T cells in tumors upon therapy in patients with paired biopsies (N = 13 tested out of 93 patients in Phase 1) (Figure 3):

Figure 3.
A. Median of circulating E6-E7–specific T cells over time measured by ELISpot (solid line shows median SFU/1 x 106 PBMCs and dashed lines indicate Patient #1 and #2 in the case report in Figure 4). Pie charts below graph show percentage of tumor-specific T cells expressing the indicated number of cytokines/markers (IFN-γ, TNF-a, CD107a, IL-2) measured by ICS in available PBMCs from HNSCC patients undergoing HB-202/HB-201 alternating 2-vector therapy at DL2 & DL3 at the corresponding timepoints (N = 26/29).
B. Percent change in tumor-infiltrating CD8+ T cells pre and post HB-200 treatment in patients with disease control (blue) and progressive disease (red) measured by IF IHC. Mean ± SD. Data shown are all patients with available paired biopsies, which includes patients from all groups explored in the study (N = 13 out of 93 total patients enrolled in Phase 1).

Paired tumor biopsies of two HNSCC patients treated with HB-200 2-vector therapy at DL2 or DL3 were available for analysis (pt #1 & pt #2 Figure 3B):

16

Table of Contents

Figure 4. Tumor response, HPV16 ctDNA, and TILs in 2 patients with stable disease who received HB-200 alternating 2-vector therapy.
A. Percent change in sum of target lesion diameters from baseline over time in Patient #1 and #2.
B. Percent change in circulating HPV16 DNA from baseline in Patient #1 and #2.
C. TILs in tumor tissue from Patient #2 with best overall response of stable disease. Tissues were analyzed by Multiplex IF IHC Vectra® Polaris™ and HALO® Quantification to determine expression of immune markers (CD8, DAPI, and PanCK).

Clinical Results: HB-200 in Combination with Pembrolizumab in the First Line Setting

In October 2023, we presented updated Phase 2 data for HB-200 in combination with pembrolizumab in the first line setting at the ESMO annual congress (Abstract 2212) for the first 20 patients treated with HB-200 and pembrolizumab in the first-line setting (data cut-off August 7, 2023). The efficacy evaluable data set (≥1 tumor scan post-treatment) consisted of 19 patients, as one patient discontinued prior to tumor scans due to COVID-related death. Baseline characteristics are highlighted in the table below.

17

Table of Contents

Safety and Tolerability

The data showed that HB-200 and pembrolizumab was generally well tolerated among the 20 patients treated. The majority of reported AEs were mild to moderate with the most common AEs being flu-like symptoms. Two patients (10%) reported serious adverse events related to the treatment with HB-200 or pembrolizumab. Only one patient (5%) discontinued due to a treatment-related adverse event of checkpoint inhibitor pneumonitis (related to pembrolizumab). The updated safety data adds to the previously reported safety and tolerability data from patients across all arms of the trial who received HB-200 monotherapy or HB-200 in combination with pembrolizumab. This generally favorable tolerability profile highlights the potential of HB-200 – and arenaviral immunotherapies in general – to be successfully combined with other immunotherapies where tumor antigen-specific T cell induction is of potential benefit.

Presented at ESMO 2023

Clinical Activity

The preliminary data showed a 42% confirmed objective response rate (“ORR”) and disease control rate (“DCR”) of 74% across 19 evaluable patients, doubling the historical 19% ORR for pembrolizumab alone. Best overall response for the evaluable population included one patient with a confirmed complete response, seven patients with confirmed partial responses, and six patients with stable disease. The preliminary data showed sustained disease control in the majority of patients. All efficacy-evaluable patients were alive at the data cutoff (August 7, 2023), and the median follow-up time at DCO was 8.3 months. Median overall survival and progression-free survival data are still maturing.

18

Table of Contents

Biomarker and Translational Results

Importantly, the data showed significant activation of antigen-specific CD8+ T cells, the body’s primary driver of tumor killing activity. Out of 17 patients with available peripheral blood mononuclear cells (“PMBC”) samples, all patients showed an increase of tumor antigen-specific circulating HPV16+ CD8+ T cells. Peak percentage of antigen-specific circulating HPV16+ CD8+ T cells reached up to 31 percent with a median of 3.36%. Max response on treatment vs. before treatment of systemic HPV-16 E7 and E6 specific T cells measured by ELISPOT showed that the median fold-increase for these patients’ total tumor specific T cells was a 451-fold increase over baseline, with the maximal increase of 4,000-fold.

19

Table of Contents

Based on the data generated in our clinical trials, we believe that HB-200, in combination with standard of care pembrolizumab, has the potential to improve treatment outcomes in persons diagnosed with HPV16+ PD-L1+ R/M OPSCC, and has the potential to be used in the first line setting. We believe that success in developing HB-200 into an effective therapy for HPV16+ OPSCC would suggest the potential of HB-200 to be an effective therapy in all HPV16+ cancers, regardless of the cancer’s tissue of origin.

The totality of the data from our clinical trials of HB-200, both as a monotherapy and in combination with pembrolizumab, give us conviction to proceed with a randomized Phase 2/3 trial to evaluate HB-200 in combination with pembrolizumab in the first line setting for patients with HPV16+ OPSCC. We plan to begin the randomized Phase 2/3 trial in 2024.

HB-700 for Targeting Mutated KRAS in Pancreatic, Colorectal and Lung Cancers

Targeting Shared Neoantigens

KRAS is a gene that acts as an on/off switch for cell growth as it is a key regulator of cell proliferation and survival. When there is a mutation, or error, in the gene, cells can grow out of control. KRAS is one of the most frequently mutated proto-oncogenes with respective mutations found in approximately 30% of all human cancers. KRAS mutations are most frequently found in pancreatic cancer (85% to 90%), colorectal cancer (approximately 40%) and lung cancer (approximately 32%). However, the spectrum of mutations mainly target amino acid position 12 (G12D, G12V, G12R, and G12C) and position 13 (G13D), rendering these mutations an attractive target for immunotherapy. We plan to develop our KRAS targeted therapy for patients suffering from pancreatic adenocarcinoma (“PAAD”), colorectal cancer (“CRC”) and lung adenocarcinoma (“LUAD”) and carrying one or more of the five most prevalent G12D, G12V, G12R, and G12C and position 13 G13D mutations. Our arenavirus technology enables us to integrate all five mutations into one single-vector, which allows our product to potentially be a single therapeutic targeting multiple large cancer indications.

An early proof of concept for targeting KRAS mutations via CD8+ T cells was reported by Tran et al in 2016. Tran targeted a KRAS mutation on position 12 (G12D) in a patient with metastatic CRC by tumor infiltrating lymphocyte (“TILs”); Tran demonstrated objective regression of all seven lung metastatic lesions from underlying CRC after the infusion of KRAS G12D-directed tumor infiltrating lymphocytes. More recently, small molecule inhibitors targeting mutated KRAS were developed and have showed promising results in clinical trials. However, those targeted therapies are limited to a single, specific KRAS mutation (KRAS G12C), which is frequently found in LUAD (approximately 50% of the late-stage cancers). However, KRAS G12C is underrepresented in PAAD and CRC when compared to other KRAS mutations such as G12D, G12V, G12R and G13D, which are much more frequently found (greater than 60% and greater than 90% in advanced CRC or PAAD, respectively). Hence, we believe that there is an urgent medical need to develop effective therapies for those patients.

20

Table of Contents

Pancreatic cancer is considered one of the most lethal malignancies. Overall, approximately 500,000 new cases of pancreatic cancer per year are recorded globally. Incidence, prevalence and mortality for pancreatic cancer has increased by more than 50% during the last 25 years. Pancreatic cancer accounts for 1.8% of all cancers but causes 4.6% of all cancer deaths and pancreatic cancer deaths are expected to double by the year 2060. The high mortality rate can be explained in part as pancreatic cancer typically remains silent, not causing signs or symptoms for a long time. When patients become symptomatic, the cancer has usually reached an advanced and incurable stage. According to the American Cancer Society, the overall 5-year survival rate for pancreatic cancer is approximately 9%. 97% of patients with metastatic cancer (i.e., stage IV) are expected to die within 5 years after diagnosis. Additional effective therapies are therefore urgently needed.

Colorectal cancer is the third most diagnosed malignancy worldwide and the second leading cause of cancer death. The incidence of colorectal cancer was estimated at 1.9 million cases in 2020, causing 0.9 million deaths worldwide. The incidence is higher in highly developed countries and it is increasing in middle- and low-income countries due to westernization. The death rate from colorectal cancer in 2018 was approximately 55%. The 5-year survival rate of patients with localized stage colorectal cancer is 90%. About 38% of patients are diagnosed at this early stage. If the cancer has spread to surrounding tissues or organs and/or the regional lymph nodes, the 5-year survival rate is 72%. If the cancer has metastasized to distant parts of the body, the 5-year survival rate is less than 15%. The advancements made in understanding colorectal cancer pathophysiology have led to increased treatment options, including endoscopic and surgical excision, radiotherapy, immunotherapy, palliative chemotherapy, targeted therapy, and extensive surgery and local ablative therapies for metastases. These treatments have prolonged overall survival and screening through endoscopy also greatly enhanced the early detection, leading to good prospects of a cure. Although the prospect for colorectal cancer therapy is generally good, the increasing number of cases and rising incidence among younger generations still poses a heavy financial burden and a public health challenge.

Lung cancer is the most common cause of cancer death worldwide, with an estimated 1.6 million deaths annually. Approximately 85% of lung cancer patients suffer from a subgroup called non-small cell lung cancer (“NSCLC”), of which LUAD and lung squamous cell carcinoma are the most common subtypes. LUAD represents approximately 40% of NSCLC and is the most common primary lung cancer diagnosed in the United States. Despite new treatments, the 5-year survival rate is only 12% to 15%.

Our Solution: HB-700 for KRAS Mutated Cancers

HB-700 is based on our replicating arenavirus platform and was designed for treatment of cancers encoding mutated KRAS, especially KRAS-mutated pancreatic, colorectal, and lung cancers. HB-700 is a replicating dual-vector therapy that has been engineered to encode fragments encoding multiple KRAS mutations found in these three cancers, specifically KRAS mutations G12D, G12V, G12R, G12C and G13D. By simultaneously targeting these five most common mutations, we believe HB-700 has the potential to benefit more patients than single mutation inhibitors. Potential coverage of KRAS mutations of important cancer indications by our product candidate HB-700 is illustrated in the following graph:

​

21

Table of Contents

Similar to our other immuno-oncology candidate therapies, we can deliver HB-700 by simple infusion; HB-700 is designed to target APCs, such as dendritic cells, without the need for cellular isolation or ex vivo processing. Since induction of KRAS mutation-specific CD8+ T cells is the mode of action of this investigational therapy, and administration of alternating LCMV- and PICV-based vectors have been shown to induce unprecedented tumor antigen-specific CD8+ T cell levels in the context of our HB-200 program, we have designed HB-700 to potentially maximize HB-700-induced CD8+ T cell responses by using replicating vectors based on both LCMV and PICV in a sequential dosing regimen.

In October 2022, we announced a strategic collaboration and license agreement with Roche to develop HB-700 for KRAS-mutated cancers. Through the collaboration, we have conducted research and early clinical development for HB-700.

In February 2023, we achieved a $10.0 million milestone payment under our HB-700 collaboration agreement with Roche. The success-based milestone payment reflected the start of the HB-700 manufacturing process to support a Phase 1 clinical trial.

On January 25, 2024, we received written notice from Roche of their decision to terminate the Research Collaboration and License Agreement dated October 18, 2022. Roche’s decision to terminate the Collaboration Agreement was made according to Roche’s right to terminate without cause, acknowledging that we had met all go-forward criteria under the Collaboration Agreement.

The Collaboration Agreement was entered into to (i) grant Roche an exclusive license to research, develop, manufacture and commercialize the Company's pre-clinical HB-700 cancer program, an arenaviral immunotherapeutic for KRAS-mutated cancers, and (ii) grant Roche an option right to exclusively license for research, development manufacturing and commercialization, a second, novel arenaviral immunotherapeutic program targeting undisclosed cancer antigens.

Pursuant to the terms of the Collaboration Agreement and the Notice, the Collaboration Agreement will be terminated on April 25, 2024. The Company remains eligible for a final milestone payment associated with an IND submission. The Company plans to submit an IND to the FDA in April 2024. Effective April 25, 2024, the Company will regain full control of the associated intellectual property portfolio and will have full collaboration and licensing rights for the HB-700 program, and we are evaluating a potential new partnership to advance HB-700. After the termination of the Collaboration Agreement, and except as disclosed above, there is no other material relationship between the Company and Roche.

HB-300 Program for Prostate Cancer

Targeting Self Antigens

We believe that our viral vectors may be appropriate for any antigen where a T cell response may be therapeutically meaningful. We have shown in multiple preclinical models that replicating product candidates are active in generating robust immune responses to tumor self antigens and that this response results in decreased tumor growth and an increase in survival rates.

Our HB-200 program targets viral antigens associated with tumors induced by HPV16. In these programs, the viral, or non self nature of the antigens, makes them a natural target for an immunotherapy approach. In addition, we are pursuing the development of product candidates based on our arenavirus platform to target self antigens, nonviral antigenic proteins that are highly overexpressed in solid tumors or only minimally expressed in normal cells. Because self antigens are found in certain normal cells as well as tumor cells, the immune system does not typically recognize them as foreign proteins and does not respond to them. This protection of self antigens from immune system attack is known as immune tolerance. The results obtained by earlier generation marketed products such as sipuleucel T, developed as PROVENGE by Dendreon Pharmaceuticals, Inc., have proven that it is possible to overcome immune tolerance and activate the immune system to produce an antitumor response.

22

Table of Contents

Our Solution: HB 300 for Prostate Cancer

We are developing our most advanced self antigen candidate in this area, HB 300, based on our replicating technology in metastatic, hormone resistant prostate cancer. Prostate cancer provides a unique treatment opportunity for immunotherapy because prostate cancer cells express a number of tumor specific antigens that serve as potential targets. HB-300 is an alternating, dual-vector replicating arenaviral immunotherapy which uses LCV and PCV as arenaviral backbones, with each expressing two well-defined antigens of prostate cancer, prostatic acid phosphatase (“PAP”) and prostate specific antigen. Subsequent clinical development may include addition of arenaviral therapeutics expressing a third antigen, prostate specific membrane antigen.

Direct evidence for the ability to induce a therapeutically relevant immune response to one of these antigens, PAP, comes from PROVENGE. To create PROVENGE, a personalized treatment, clinicians remove dendritic cells from the body, load them with PAP and then reintroduce them to the patient. The use of PROVENGE has been shown to increase survival in patients with metastatic, hormone resistant prostate cancer and led to its approval in 2010. Other companies are developing dendritic cell therapies similar to PROVENGE by using other tumor antigens. These dendritic cell therapies generally require complex, patient-specific therapeutic manufacturing processes involving isolating cells from patients, loading them ex vivo with tumor antigens and then readministering the cells to patients.

Since HB-300 is a replicating-based product candidate, we can deliver it by simple infusion whereby it targets APCs, such as dendritic cells, without the need for cellular isolation or ex vivo processing. We have shown in preclinical experiments and in the HB-200 clinical program that replicating vectors can lead to robust CD8+ T cell responses to the encoded antigens.

In April 2022, we presented preclinical data at the American Association for Cancer Research Annual Meeting (abstract #3298 and abstract #4198) that showed antitumor activity with a single administration of replicating arenaviral immunotherapy targeting tumor self-antigens. Specifically, the arenaviral immunotherapy was able to overcome immune tolerance, induce potent T cell responses against two different tumor self-antigens and reduce tumor growth in these cancers. Notably, targeting tumor self-antigens can be a challenge because the immune system does not recognize these molecules as foreign. These preclinical data provided further support for the clinical evaluation of our HB-300 candidate for treatment of prostate cancer. The AACR data demonstrated the ability of our arenaviral immunotherapeutic

23

Table of Contents

technology to induce potent T cell responses against tissue-specific self-antigens, which is the same type of tumor self-antigens targeted by HB-300.

In July 2022, we announced that the FDA accepted our IND for HB-300 for the treatment of metastatic castration-resistant prostate cancer (“mCRPC”). A Drug Master File was also accepted, which we believe will facilitate reduced cycle time between completion of preclinical studies and clinical entry of our pipeline projects.

In February 2023, we opened a first-in-human Phase 1/2, multinational, multicenter, open-label study of HB-302/HB-301 alternating dual-vector therapy in participants with mCRPC. This study (NCT05553639) has 2 phases: a Phase 1 dose escalation with an RP2D confirmation and a Phase 2 dose expansion. The Phase 1 dose escalation will evaluate HB-302/HB-301 alternating dual-vector therapy for safety and tolerability, preliminary efficacy and immunogenicity, and determination of a RP2D. The Phase 2 dose expansion will assess HB-302/HB-301 alternating dual-vector therapy at the RP2D defined in the Phase 1 portion of the study. Based on lessons learned from the HB-200 program, HB-302/HB-301 Alternating dual-vector therapy will be administered intravenously every three weeks (Q3W) for the first five doses and every 6 weeks (Q6W) from the fifth dose and onward. HB-302 is to be administered first followed three or six weeks later by HB-301.

As of December 31, 2023, we had completed enrollment of the Phase 1 dose escalation cohorts. The Study Safety Committee deemed that HB-300 was generally safe and well-tolerated in both dose escalation cohorts. Initial analysis of target antigen-specific T cell responses – using direct ELISPOT without pre-expansion of T cells – in ten patients between dose level 1 (N=5) and dose level 2 (N=5) indicated a 15- to 26-fold increase of target antigen specific T cells in 30% of patients (3/10).

In line with our previously announced strategy to prioritize the development of HB 200, we have terminated the Phase 1/2 study of HB-300 and will utilize the associated capital and resources for the advancement of our HB-200 program. We will not proceed to the Phase 2 dose expansion component of this study, but we will keep the IND open to allow the potential for further development of this program in the future.

Next Generation Product Candidates

A critical advantage of our technology is that it is designed to deliver full length proteins directly to APCs, such as dendritic cells, for endogenous expression and direct presentation to CD8+ T cells. Having APCs, such as dendritic cells, express full-length proteins and present all fragments (epitopes) overcomes the major difficulty of attempting to predict which part of the protein, or epitope, will be presented by the patient’s individual major histocompatibility complex (“MHC”) class I alleles. This presentation is important in immunotherapy because T cells will only recognize and respond to the antigen when it is bound to the individual’s MHC class I molecules, of which several hundred different versions exist in the population. While this approach overcomes the major issue faced by neoepitope-based personalized antigen approaches, it also has limitations in that the repertoire of known tumor-associated proteins that could be used for targets is limited. The best example of full-length proteins that are, to a degree, cancer-specific and immunogenic include the cancer testis antigens, examples of which include NYESO1, MAGE and CAGE. These cancer testis antigens have been known for decades, and many of them are currently being pursued by other companies. For many tumor types the cancer testis type of antigens remains unknown. Furthermore, most of the known tumor associated antigens are not commonly expressed or are not sufficiently specific to tumor tissue, making them suboptimal targets for clinical development.

Infectious Disease Pipeline Highlights

While our strategic priority is the development of our oncology portfolio, we believe that our platform is also uniquely positioned to provide value from the prophylactic and therapeutic use against infectious diseases. We plan to continue developing infectious disease therapies in partnership with other companies.

Our collaboration with Gilead to develop functional cures for chronic HBV and HIV infections has become our main driver of our infectious disease pipeline progress. We entered into our collaboration and licensing agreement (the “Gilead Collaboration Agreement”) with Gilead in June 2018. To date, we have received $46.2 million in upfront and

24

Table of Contents

milestone payments and $42.2 million of cost reimbursements from Gilead. Both programs have completed preclinical research and the HBV program is currently in a Phase 1 clinical trial. The HIV program is being progressed towards entry into a Phase 1 clinical trial.

In January 2023, we announced the achievement of a $5.0 million milestone payment for the completion and delivery of a regulatory support package for Gilead’s Phase 1 clinical trial of the HBV therapeutic vaccine developed under the Gilead Collaboration Agreement. The first participant in the Phase 1 clinical trial being conducted by Gilead was dosed in 2023. The preclinical data on the HBV vaccine as a potential component for a curative regimen were presented at the American Association for the Study of Liver Diseases (“AASLD”) in November 2022 and was selected by AASLD as a “Best of the Liver Meeting” highlight. These data were published in The Journal of Infectious Disease in August of 2023. Gilead is solely responsible for further development and commercialization of the HBV product candidate.

In February 2022, we signed an amended and restated collaboration agreement (the “Restated Gilead Collaboration Agreement”) which revised the terms only for the HIV program, whereby we took on development responsibilities for the HIV program through a Phase 1b clinical trial and Gilead provides funding through a combination of an initiation payment of $15.0 million, a milestone payment of $5.0 million and equity contributions of up to $35.0 million. In November 2023, we announced FDA clearance of our IND application for the treatment of HIV. Additionally, Nature Partner Journals published peer-reviewed preclinical data for the program. Data show that HB-500 was well tolerated and generated robust, high-quality and durable immune responses (antigen-specific T cells and antibodies) in non-human primates, and arenaviral therapeutic vaccination significantly reduced SIV viral load and clinical illness in those animals compared to placebo.

As of December 31, 2023, we received approximately $26.25 million from Gilead’s purchases of our common stock under the Stock Purchase Agreement with Gilead entered into in connection with the Restated Gilead Collaboration Agreement. We have the right, subject to certain terms and conditions, to sell an additional approximately $8.75 million of common stock to Gilead as pro-rata participation in potential future equity raises. Gilead retains an exclusive right (the “Option”) to take back the rights for the HIV program, including further research, development and commercialization. If Gilead elects to exercise the Option, we will be entitled to a $10.0 million program completion fee.

Infectious Disease: In Collaboration with Gilead

HB-400 for the Treatment of HBV

HB-400 Preclinical Data Package for Hepatitis B Virus Cure Program

In collaboration with Gilead Sciences, Inc. a HBV-specific immunotherapy consisting of 2 non-replicating arenavirus vectors derived from PICV (HB-402) and 2 non-replicating arenavirus vectors derived from LCMV (HB-401) was developed. The immunotherapy is intended to utilize the patient`s own immune system to induce a strong cellular and antibody response against HBV.

Arenavirus vectors were constructed to encode three different HBV antigens: HBV Core, Pol (an inactivated version of the HBV polymerase) and HBV surface antigen (“HBsAg”). In a preclinical study, conducted in nonhuman primates (“NHPs”), animals were immunized with HB-402 and HB-401 in an alternating, sequential manner, which resulted in a robust cellular immune response with HBV-specific CD8+ T-cell responses against all 3 encoded HBV antigens, and induction of high titers of anti-HBsAg antibodies (Figure 1).

25

Table of Contents

Figure 1: PICV-LCMV vaccination produces robust antibody and T cell responses in non-human primates. (A) Anti-HBsAg responses induced by monthly dosing with alternating HB-402/GS-2829 and HB-401/GS-6779. Vector dosing timepoints are indicated by red (LCMV vector) or green (PICV vector) arrowheads. (B) Peak anti-HBsAg responses in individual animals. (C) Total HBV-specific ELISpot response kinetics. (D) Peak total HBV-specific T cell responses in individual animals.

In vivo efficacy of HB-402 and HB-401 was tested in mice transduced with varying amounts of AAV-HBV vector (high: 2x10⁹ viral genomes AAV-HBV; low: 5x10⁸ viral genomes AAV-HBV) to establish HBV persistence (chronic HBV animal model). It was found that, in mice with low serum HBV surface antigen (HBsAg) levels HB-402/HB-401 vaccination cleared detectable HBsAg in 6 of 8 mice and reduced antigens to just above the limit of detection in the remaining two animals (Figure 2, left panel). HBsAg loss was accompanied by near elimination of detectable HBV+ hepatocytes in liver of those mice (Figure 2, right panel) and significant increases in HBV-specific cellular immune responses in splenocytes.

Figure 2: Vaccine efficacy in the AAV-HBV mouse model. C57BL/6 mice were transduced with 5x10⁸ or 2x10⁹ viral genomes (vg) of AAV-HBV on day -35. HB-402/GS-2829 and HB-401/GS-6779 or vehicle control immunization were administered every 2 weeks starting on Day 0 (arrows). (Left panel) Plasma HBsAg levels over time. (Right panel) HBV core+ cells in liver immunohistochemistry at day 84. **p < 0.01.

26

Table of Contents

(Figures from: Schmidt et al., Alternating arenavirus vector immunization generates robust polyfunctional genotype cross-reactive HBV-specific CD8 T cell responses and high anti-hbs titers. The Journal of Infectious Diseases, jiad340, https://doi.org/10.1093/infdis/jiad340).

HB-400 Clinical Development

We believe that the results of the preclinical studies, and the association of strong CD8+ T-cell responses and anti-HBsAg antibodies with immune clearance and long-term control of chronic hepatitis B virus (“CHBV”) (Boni 2012, Hoogeveen 2022, Yip 2018), provide a strong rationale for clinical development of HB-400.

A phase 1a/1b study (GS-US-642-5670 / NCT05770895) is underway and is designed to evaluate the safety and immunogenicity of HB-402 and HB-401 healthy volunteers and participants with CHB. Gilead Sciences initiated screening in the first quarter of 2023. Enrollment continues as the date of this report.

HB-500 for the Treatment of HIV

HB-500 Preclinical Data Package for HIV Cure Program

In collaboration with Gilead Sciences, Inc. a preclinical study in a NHP model of HIV infection was conducted. The model uses Simian Immunodeficiency Virus (“SIV”) as a surrogate virus for HIV. The study shows that immunization of monkeys with replicating arenavirus vaccine vectors encoding SIV antigens (i.e., SIV Gag, Env, and Pol) is safe, immunogenic, and efficacious. The immunization induced a robust immune response, composed of SIV-specific T-cell responses and SIV Env-binding antibodies, which resulted in a reduction of SIV viral load and clinical illness in monkeys after subsequent SIV challenge.

In this study, 24 monkeys were immunized with an alternating, heterologous prime/boost of PICV and LCMV based vectors, encoding the respective SIV antigens. Eight monkeys were treated with a placebo and served as control group (Figure 1). Four weeks after the last vaccination, the monkeys were challenged with a high dose of SIV.

Figure 1: Schematic of the preclinical monkey study

The vaccine induced cellular response was determined by IFNγ ELISpot, an assay which allows to measure T-cells and other immune cells, which respond to a specific antigen (in this case SIV vaccine antigen) by releasing IFNγ. It was found that after vaccination, animals developed robust SIV Gag-, Env-, and Pol-specific cellular responses (median 44-fold increase after each vaccine boost) compared with pre-vaccination (Figure 2).

27

Table of Contents

Figure 2: Total SIV-specific IFN-γ response measured in peripheral blood mononuclear cells (PBMCs) over weeks 0–32 of the study; circles on the x-axis indicate the day of vaccination with PICV (closed circles) and LCMV (open circles) with median responses represented by horizontal black lines.
***p < 0.0001
(a p value of 0.05 or less represents statistical significance, meaning that there is a less than 1-in-20 likelihood that the observed results occurred by chance. A p value of 0.01 or less means that there is a less than 1-in-100 likelihood that the observed results occurred by chance).

Four weeks after the last vaccination, animals (24 monkeys in the treatment group and 7 monkeys in the Placebo group) were challenged with a high dose of SIV. Over the course of 40 weeks, SIV viral load in blood as well as signs for clinical illness of the animals was monitored (Figure 3).

Animals which were vaccinated with arenavirus vectors had significant reductions in median SIV viral load (1.45-log10 copies/mL) after SIV challenge compared with placebo (Figure 3, left panel). In addition, clinical illness after SIV infection (which is characterized by a decrease in CD4 T cell counts and body weight, non-resolving diarrhea, anemia, mild edema, loss of appetite, jaundice, lymph node swelling along with an increase in viral load) was monitored for 40 weeks after infection. It was found that vaccination resulted in significant reduction in SIV-induced clinical illness versus the placebo group at 40 weeks after challenge (Figure 3, right panel). Only 2 out of 24 monkeys in the vaccination group showed symptoms of clinical illness (app. 8%), whereas 3 out of 7 monkeys in the Placebo group exhibited signs of clinical illness (app. 42%).

Figure 3: SIV viral load after challenge with SIV.
Left panel: Kinetics of SIV viral load over weeks 0–40 after challenge in placebo (closed triangles; n = 7 NHPs) and PICV/LCMV (closed circles; n = 24 NHPs) groups. Data are median ± IQR (interquartile range).
Right panel: Clinical disease progression after SIV challenge.
Correlation of (f) peak breadth of Gag-specific T-cell responses at 2 weeks after the third vaccine dose and
*p < 0.05.

28

Table of Contents

(Figures from: Boopathy et al., Immunogenic arenavirus vector SIV vaccine reduces setpoint viral load in SIV-challenged rhesus monkeys. npj Vaccines (2023) 8:175 ; https://doi.org/10.1038/s41541-023-00768-x).

HB-500 Clinical Development

We believe, the results of this preclinical monkey study support clinical investigation of arenavirus-based vectors as a central component of therapeutic vaccination for HIV cure. We expect to initiate a Phase 1 clinical study of HB-500 in people with HIV in the second quarter of 2024. Under the collaboration agreement with Gilead, we are eligible for a milestone payment upon dosing the first patient in this study.

Intellectual Property

Our success depends, in part, on our ability to obtain and maintain intellectual property protection for our product candidates, technology and knowhow, to defend and enforce our intellectual property rights, in particular, our patent rights, to preserve the confidentiality of our knowhow and trade secrets, and to operate without infringing the proprietary rights of others. We seek to protect our product candidates and technologies by, among other methods, filing U.S. and foreign patent applications related to our proprietary technology, inventions and improvements that are important to the development of our business. We also rely on trade secrets, knowhow, continuing technological innovation and in-licensing of third-party intellectual property to develop and maintain our proprietary position. We, or our collaborators and licensors, file patent applications directed to our key product candidates in an effort to establish intellectual property positions to protect our product candidates as well as uses of our product candidates for the prevention and/or treatment of diseases.

As of February 19, 2024, we are the owner, co-owner or exclusive licensee to 13 issued U.S. patents and 12 pending U.S. patent applications, three pending international Patent Cooperation Treaty (“PCT”) applications, two pending U.S. provisional patent applications, and approximately 200 issued foreign patents and approximately 100 foreign patent applications. These patents and patent applications are related to our technologies concerned with the arenavirus-based immunization systems, non-replicating and replicating, our product candidates and various development programs, which are directed to the use of these immunization systems for the treatment and/or prevention of various infectious diseases or cancer, and certain clinical uses of our current or future product candidates in oncology. The issued patents and pending patent applications contain claims directed to various aspects of our work, including compositions of matter, methods of treatment and prevention, methods of producing certain compositions, and use of our product candidates in combination with certain other therapeutics.

Non-Replicating Technology Portfolio

Our patent portfolio related to our non-replicating technology includes a patent family exclusively licensed to us from the University of Zurich. This patent family includes five patents granted in the United States and patents granted in Europe (validated in Austria, Belgium, Bulgaria, Croatia, Cyprus, Czech Republic, Denmark, Estonia, Finland, France, Germany, Greece, Hungary, Iceland, Ireland, Italy, Latvia, Lithuania, Luxembourg, Malta, Netherlands, Norway, Poland, Portugal, Romania, Slovakia, Slovenia, Spain, Sweden, Switzerland, Turkey and the United Kingdom), Canada, China, India, Hong Kong, Macao and Japan. This patent family also includes pending applications in the United States, Europe, and Hong Kong. The granted patents and pending applications related to our non-replicating technology are expected to expire no earlier than 2028, not giving effect to any potential patent term extensions and patent term adjustments and assuming payment of all appropriate maintenance, renewal, annuity or other governmental fees. Our non-replicating technology is being employed or may be employed in one or more of the product candidates or programs described herein.

Replicating Technology Portfolio

We are the owner or exclusive licensee to proprietary patent positions related to our replicating technology. Our patent portfolio related to our replicating technology includes a patent family exclusively licensed from the University of Geneva. This patent family includes a patent granted in the United States and patents granted in Europe (validated in Albania, Austria, Belgium, Bulgaria, Croatia, Cyprus, Czech Republic, Denmark, Estonia, Finland, France, Germany,

29

Table of Contents

Greece, Hungary, Iceland, Ireland, Italy, Latvia, Lithuania, Luxembourg, Macedonia, Malta, Monaco, Norway, Poland, Portugal, Romania, Serbia, Slovakia, Slovenia, Spain, Sweden, Switzerland/LI, The Netherlands, Turkey and the United Kingdom), Australia, Canada, Hong Kong, India and Japan. The European patent in this family (European Patent No. 3218504) was opposed by a third party in April 2021. The opposition was dismissed, and the patent was maintained as granted by the European Patent Office (“EPO”) in an oral proceeding on May 9, 2023. This patent family also includes pending applications in the United States, Europe, Australia, Japan, China and Hong Kong. The granted United States patent from the first patent family related to our replicating technology is expected to expire in April 2037 due to patent term adjustment. The granted patents in Europe, Australia, Canada, Hong Kong, India and Japan, and the pending applications are expected to expire in 2035, not giving effect to any potential patent term extensions or patent term adjustments and assuming payment of all appropriate maintenance, renewal, annuity or other governmental fees. The second patent family in our replicating platform portfolio is jointly owned by us and the University of Basel. The rights of the University of Basel under this patent family are exclusively licensed to us. This second patent family includes patents granted in Australia, China, Hong Kong and Japan. This patent family also includes pending applications in various countries, including in the United States, Europe, Eurasia, Hong Kong, Korea, China, Macao, Australia, New Zealand, Mexico, Japan, Brazil, Singapore, India, and Israel. The granted patents and the pending applications are expected to expire in 2037, not giving effect to any potential patent term extensions or patent term adjustments and assuming payment of all appropriate maintenance, renewal, annuity or other governmental fees. Our replicating technology is being employed or may be employed in one or more of the product candidates or programs described herein.

Split Vector Technology Portfolio

We are the owner or exclusive licensee to proprietary patent positions related to a novel molecular strategy to vectorize arenavirus genomes, which we refer to as the Split Vector Technology. Our patent portfolio related to the Split Vector Technology includes a patent family exclusively licensed from the University of Basel. This patent family includes pending applications in the United States, Europe, Hong Kong, Canada, Australia, Japan, India and China. The second patent family related to the Split Vector Technology is jointly owned by us and the University of Basel. The rights of the University of Basel under this patent family are exclusively licensed to us. This second patent family includes pending applications in the United States and Europe. The pending applications related to the Split Vector Technology are expected to expire in November 2040 and May 2042, respectively, not giving effect to any potential patent term extensions or patent term adjustments and assuming payment of all appropriate maintenance, renewal, annuity or other governmental fees. The Split Vector technology is currently not employed in any of our clinical stage product candidates or late-stage preclinical programs.

Oncology Technology Portfolio

For the application of our non-replicating and replicating technologies in oncology, we own three patent families, one pending international PCT application and one pending U.S. provisional patent application, relating to potential clinical uses of our product candidates, such as combination treatments and modes of administration. One of the patent families includes a patent granted in the United States and patents granted in Europe (validated in Albania, Austria, Belgium, Bulgaria, Croatia, Cyprus, Czech Republic, Denmark, Estonia, Finland, France, Germany, Greece, Hungary, Iceland, Ireland, Italy, Latvia, Lithuania, Luxembourg, Macedonia, Malta, Monaco, Norway, Poland, Portugal, Romania, Serbia, Slovakia, Slovenia, Spain, Sweden, Switzerland/LI, The Netherlands, Turkey and the United Kingdom), Hong Kong, Australia, China, Macao, India and Japan. This patent family also includes pending applications in the United States, Europe, Canada, Japan, India and Hong Kong. A second patent family includes a patent granted in China and pending applications in the United States, Europe, Australia, Canada, Hong Kong, India and Japan. The third patent family includes pending applications in the United States, Europe, Australia, Canada, China, Hong Kong, India and Japan. The granted patents and pending applications within the three patent families are expected to expire between 2036 and 2038, not giving effect to any potential patent term extensions or patent term adjustments and assuming payment of all appropriate maintenance, renewal, annuity or other governmental fees. Applications claiming priority to the respective PCT application are expected to expire in February 2043, not giving effect to any potential patent term extensions or patent term adjustments and assuming payment of all appropriate maintenance, renewal, annuity or other governmental fees.

30

Table of Contents

HB-200 (HPV16+ Head and Neck Squamous Cell Carcinoma)

HB-201 and HB-202, the two components of our HB-200 product candidate, rely on our replicating technology and, depending on their clinical implementation, may relate to one or more applications in our oncology patent portfolio. In addition to the replicating and oncology patent portfolios, we own two patent families that relate more specifically to our HB-200 product candidate. The first patent family includes two patents granted in the United States and patents granted in Australia, China, Macao, India and Japan with claims directed to compositions of matter. This patent family also includes pending applications in the United States, Europe, Australia, Canada, China, India, Japan and Hong Kong. The second patent family includes pending applications in the United States, Europe, Eurasia, Australia, Brazil, Canada, China, Costa Rica, Hong Kong, India, Israel, Japan, Korea, Mexico, New Zealand, Peru, Singapore, South Africa relating to HB-200 treatment regimens. Excluding the replicating and oncology patent portfolios, the granted patents and pending applications specifically related to our HB-200 product candidate are expected to expire in 2036 and 2041, respectively, not giving effect to any potential patent term extensions or patent term adjustments and assuming payment of all appropriate maintenance, renewal, annuity or other governmental fees.

HB-700 (KRAS Mutated Tumors)

Our HB-700 product candidate relies on our replicating technology and, depending on its clinical implementation, may relate to one or more applications in our oncology patent portfolio. In addition to the replicating and oncology patent portfolios, we currently own one pending international PCT application, one pending application in Taiwan, and one pending application in Argentina that more specifically relate to our HB-700 product candidate. Any patent claiming priority to this pending PCT application specifically related to our HB-700 product candidate is expected to expire in 2042, not giving effect to any potential patent term extensions or patent term adjustments and assuming payment of all appropriate maintenance, renewal, annuity or other governmental fees.

HB-300 (Prostate Cancer)

Our HB-300 product candidate relies on our replicating technology and, depending on its clinical implementation, may relate to one or more applications in our oncology patent portfolio. In addition to the replicating and oncology patent portfolios, we currently own one patent family that more specifically relates to our HB-300 product candidate. This patent family includes pending applications in the United States, Europe, Australia, Brazil, Canada, China, India, Israel, Japan, Korea, Mexico, New Zealand, Singapore and South Africa. The pending applications specifically related to our HB-300 product candidate are expected to expire in 2042, not giving effect to any potential patent term extensions or patent term adjustments and assuming payment of all appropriate maintenance, renewal, annuity or other governmental fees.

HB-400 (Hepatitis B Virus)

Our HB-400 product candidate, codeveloped with Gilead, is in Phase 1b clinical trial and is being built on our non-replicating technology. In addition to the non-replicating patent portfolio, we own one patent family that relates to the use of our platform technologies for prevention and treatment of HBV. This patent family includes patents granted in the United States, Europe (validated in Austria, Belgium, Bulgaria, Croatia, Cyprus, Czech Republic, Denmark, Estonia, Finland, France, Germany, Greece, Hungary, Iceland, Ireland, Italy, Latvia, Lithuania, Luxembourg, Malta, Norway, Poland, Portugal, Romania, Slovakia, Slovenia, Spain, Sweden, Switzerland/LI, The Netherlands, Turkey and the United Kingdom), Australia, China, Hong Kong, Macao, Mexico and Japan. This patent family also includes pending applications in the United States, Europe, Australia, Brazil, Canada, China, India, Israel, Japan, Hong Kong, Korea, Mexico, New Zealand and Singapore. Excluding the non-replicating patent portfolio, the granted patents and pending applications related to the HBV program are expected to expire in 2036, not giving effect to any potential patent term extensions or patent term adjustments and assuming payment of all appropriate maintenance, renewal, annuity or other governmental fees.

31

Table of Contents

HB-500 (HIV)

Our HB-500 product candidate, codeveloped with Gilead, is in preclinical phase and is being built on our replicating technology. In February 2022, we signed an amended and restated collaboration agreement, wherein we assumed development responsibilities through the end of Phase 1b. In November 2023, our investigational new drug application was cleared by the FDA and we anticipate initiating the Phase 1b trial in the first half of 2024. We currently do not own any patents or patent applications that more specifically relate to an HIV program outside of the replicating patent portfolio.

The actual term of any patent that may issue from the above described patent applications claiming one of our product candidates could be longer than described above due to patent term adjustment or patent term extension, if available, or shorter if we are required to file terminal disclaimers. The term of individual patents depends upon the legal term for patents in the countries in which they are granted. In most countries, including the United States, the patent term is 20 years from the earliest claimed filing date of a non-provisional patent application in the applicable country.

Our ability to maintain and solidify our proprietary position for our product candidates and technologies will depend on our success in obtaining effective patent claims and enforcing those claims once granted. We do not know whether any of our patent applications will result in the issuance of any patents, or what the scope of the claims in any future issued patents may be. Our issued patents and those that may issue in the future, or those licensed to us, may be challenged, invalidated, narrowed, rendered unenforceable or circumvented, which could limit our ability to stop competitors from marketing identical or substantially similar products or could reduce the length of term of patent protection that we may have for our products. With respect to patents and patent applications licensed to us, our licensors may have the right to terminate our licenses if we fail to comply with our obligations under the applicable license agreement. In addition, the claims granted in any of our issued patents may not provide us with advantages against competitors with similar products or technology. Furthermore, our competitors may independently develop technologies that are similar or identical to technology developed by us but that do not infringe our patents or other intellectual property. Because of the extensive time required for development, testing and regulatory review of a potential product, it is possible that, by the time that any of our product candidates or those developed by our collaborators can be commercialized, our key patent may have expired or may only continue to remain in force for a short period following commercialization, thereby reducing the usefulness of the patent.

We seek to protect our proprietary technology and processes, in part, by confidentiality agreements with our employees, consultants, scientific advisors and other contractors. These agreements may be breached, and we may not have adequate remedies for any breach. In addition, our trade secrets may otherwise become known or be independently discovered by competitors. To the extent that our employees, consultants or contractors use technology or know-how owned by others in their work for us, disputes may arise as to the rights in related inventions. For this and more comprehensive risks related to our intellectual property, see “Risk Factors—Risks Related to Our Intellectual Property.”

Gilead Collaboration Agreement and Stock Purchase Agreement

Overview

On June 4, 2018, we entered into the Gilead Collaboration Agreement, with Gilead to collaborate on preclinical research programs to evaluate potential vaccine products using or incorporating our replicating and non-replicating technology platforms for the treatment, cure, diagnosis, or prevention of HBV or HIV, which we refer to, collectively, as the Field.

Pursuant to the Gilead Collaboration Agreement, we granted Gilead an exclusive, worldwide, royalty bearing license to our knowhow and our owned and in-licensed patent rights (including those patent rights in-licensed from the University of Geneva, the University of Basel, and the University of Zurich) that are necessary or reasonably useful for researching, developing, manufacturing or commercializing products that contain a vaccine that uses our replicating or non-replicating technology platforms for expressing one or more HIV or HBV antigens, which foregoing knowhow and patent rights we refer to as the Licensed Technology (and each such product a Licensed Product), for the purpose of researching, developing, manufacturing and commercializing Licensed Products for uses in the Field.

32

Table of Contents

Pursuant to the Gilead Collaboration Agreement, we will own all new intellectual property conceived or created out of the activities conducted under the Gilead Collaboration Agreement that specifically relate to the replicating and non-replicating technology platforms. Gilead will own all other intellectual property rights conceived or created out of the activities conducted under the Gilead Collaboration Agreement.

On February 15, 2022, we entered into the Restated Gilead Collaboration Agreement, which altered key aspects of the collaboration pertaining to the HIV therapeutic. Specifically, we assumed responsibility for advancing the HIV program through to the end of a Phase 1b clinical program, and Gilead retains an exclusive right, the Option, for further development thereafter. Pursuant to the Option, Gilead has the exclusive right to take back the development rights for such HIV program candidates and to further research, develop, and commercialize such candidates in accordance with the terms and conditions of the Restated Gilead Collaboration Agreement. Gilead may exercise the Option at any time, but no later than 60 days after the receipt of a data package containing pre-clinical, clinical, chemistry and manufacturing control, regulatory and other data specified by the Restated Gilead Collaboration Agreement in return for an option exercise fee of $10.0 million.

If the Option is not exercised by Gilead during the term of the Option, or if Gilead provides written notice to us of its intention to not exercise the Option, then the terms of the Restated Gilead Collaboration Agreement will be deemed terminated with respect to the HIV Development Plan and HIV Licensed Products (each as defined in the Restated Gilead Collaboration Agreement), and the Field and rights granted under the Restated Gilead Collaboration Agreement will be limited to the HBV indication. Furthermore, if the Option expires or is terminated, the non-competition and right of first negotiations terms contained in the Restated Gilead Collaboration Agreement and summarized below will not be applicable to the development for HIV indications. In the event the Option is not exercised, we and Gilead will work in good faith to enter into a license agreement pursuant to which Gilead will grant us a milestone and/or royalty-bearing license under certain Gilead owned intellectual property necessary or reasonably useful to allow us to research, develop, manufacture and commercialize HIV product candidates as of the date on which the Option is declined.

Financial support from Gilead to us includes a $15.0 million non-refundable initiation fee and $35.0 million equity commitment pursuant to the Stock Purchase Agreement. As of December 31, 2023, we received approximately $26.25 million from Gilead’s purchases of our common stock under the terms of this equity commitment. In December 2023, the Stock Purchase Agreement was amended. Under the amended terms we have the right to sell an additional $8.75 million of common stock to Gilead as pro-rata participation with an equity financing (either public or private) at the offer price of the financing. Our option to sell these shares to Gilead expires on December 20, 2025.

Pursuant to the Gilead Collaboration Agreement, in the event we offer a license or other rights to the Licensed Technology to a third party to research, develop, manufacture or commercialize a Licensed Product outside of the Field before June 4, 2028, we are required to offer Gilead a right of first negotiation for the same rights to the Licensed Technology in such field offered to the third party. If the Option expires or is terminated, the right of first negotiations terms contained in the Restated Gilead Collaboration Agreement will not be applicable to the development for HIV indications.

Financial Terms

Upon execution of the Gilead Collaboration Agreement, Gilead paid us a one-time upfront fee of $10.0 million and through to December 31, 2023, we received $21.2 million in milestone payments for the achievement of pre-clinical research milestones.

Upon execution of the Restated Gilead Collaboration Agreement, we became entitled to a program initiation fee of $15.0 million. In addition, we are eligible for up to $140.0 million in developmental milestone payments for the HBV program and $50.0 million in commercialization milestone payments for the HBV program. If Gilead exercises the Option, we are eligible for up to a further $167.5 million in developmental milestone payments for the HIV program, inclusive of the $10.0 million program completion fee payable upon Option exercise, and $65.0 million in commercialization milestone payments for the HIV program. Upon the commercialization of a Licensed Product, if ever, we are eligible to receive tiered royalties of a high single-digit to mid-teens percentage on the worldwide net sales of

33

Table of Contents

each HBV Licensed Product, and royalties of a mid-single-digit to 10% of worldwide net sales of each HIV Licensed Product, if the Option is exercised. The royalty payments are subject to reduction under specified conditions set forth in the Gilead Collaboration Agreement. In addition, Gilead is obligated to pay us for all out-of-pocket costs incurred by us in connection with the HBV program.

In addition, Gilead is obligated to pay us for all out-of-pocket costs incurred by us in connection with the HBV programs, including CMO related costs, to the extent contemplated under the research plans and research budget. In December 2019, Gilead agreed to expand the reimbursement for our resources allocated to the collaboration.

​

Termination

Either party may terminate for the uncured breach of the other party and upon the other party filing for bankruptcy, reorganization, liquidation, or receivership proceedings. On a program-by-program basis, at any time after the expiration or termination of the collaboration term for such program, Gilead may terminate the Restated Gilead Collaboration Agreement with respect to such program or on a product by product or a country-by-country basis upon prior written notice. If the Restated Gilead Collaboration Agreement is not otherwise terminated prior to the expiration of the last to expire royalty term, upon such expiration the license granted to Gilead will continue in effect, but will be fully paid-up, royalty free, perpetual, and irrevocable.

Supply Agreement

In December 2020, we entered into a Clinical Supply Agreement with Gilead. Under the terms of the Clinical Supply Agreement, we provide Gilead with drug product for use in proof-of-concept clinical trials associated with the Licensed Products designated under the Gilead Collaboration Agreement. We receive reimbursement at an agreed cost in accordance with the terms of the Restated Gilead Collaboration Agreement. Clinical supply of a potential Phase 3 clinical trial will be regulated in a separate supply agreement.

Stock Purchase Agreement

In connection with the Restated Gilead Collaboration Agreement, on February 15, 2022, the Effective Date, we entered into the Stock Purchase Agreement with Gilead. Pursuant to, and subject to the terms and conditions of, the Stock Purchase Agreement, Gilead will be required, at our option, to purchase up to $35,000,000 of our common stock, the proceeds of which we intend to use to fund additional research and development activities of our HIV program. On the Effective Date, Gilead purchased an initial amount of 1,666,666 unregistered shares of our common stock in exchange for approximately $5.0 million at a purchase price per share equal to $3.00. On December 20, 2023, the parties amended the terms of the Stock Purchase Agreement and Gilead purchased 15,000,000 shares of our common stock in exchange for approximately $21.25 million in cash at a purchase price per share equal to $1.4167. Pursuant to the terms of the Stock Purchase Agreement, we may require Gilead to purchase the balance of the $8.75 million of common stock as pro-rata participation in potential future equity raises. Our ability to sell shares of our common stock to Gilead are subject to specified limitations, including compliance with Nasdaq Rule 5635(d) and continued compliance with the Nasdaq listing rules. The Stock Purchase Agreement also prohibits Gilead from purchasing shares of our common stock if such purchase would result in Gilead being a beneficial owner of more than 19.9% of the total number of our then-issued and outstanding shares of common stock.

The Stock Purchase Agreement may be terminated: (1) by Gilead (a) any time an Event of Default (as defined in the Stock Purchase Agreement) exists or (b) if we suspend, terminate or otherwise cease to perform our obligations under the HIV Development Plan; (2) automatically if Gilead exercises its Option pursuant to the Restated Gilead Collaboration Agreement; (3) by us for any reason; (4) automatically on the date that we sell and Gilead purchases the full $35.0 million of common stock; or (5) automatically on December 20, 2025.

Pursuant to the terms of the Stock Purchase Agreement, we and Gilead agreed to enter into a registration rights agreement obligating us to file a registration statement on Form S-3 to register for resale any additional purchases of common stock within four months of any additional purchases of common stock by Gilead.

34

Table of Contents

Roche Collaboration Agreement

On October 18, 2022, we entered into the Roche Collaboration Agreement, with Roche, to (i) grant Roche an exclusive license to research, develop, manufacture and commercialize our pre-clinical HB-700 cancer program, an arenaviral immunotherapeutic for KRAS-mutated cancers, and (ii) grant Roche an exclusive option right to exclusively license for research, development manufacturing and commercialization, a second, novel arenaviral immunotherapeutic program targeting undisclosed cancer antigens (collectively UCAs or UCA Program). Pursuant to the Roche Collaboration Agreement, we received a non-refundable upfront payment of $25.0 million and have received $10.0 million in milestone payments for the achievement of a GMP manufacturing milestone.

On January 25, 2024, Roche terminated the Collaboration Agreement without cause, effective as of April 25, 2024. The Company remains eligible for a final milestone payment associated with an IND submission. The Company plans to submit an IND to the FDA prior to the termination effective date and achieve the milestone payment.

License Agreements

University of Geneva License Agreement

In February 2017, we entered into an Exclusive License Agreement with the University of Geneva, the Geneva Agreement. Pursuant to the Geneva Agreement, the University of Geneva granted us a worldwide, exclusive license to use the University of Geneva’s technology titled “method for vaccine delivery” and the patent rights in the subject matter of U.S. Provisional Patent Application No. 62/079,493 and PCT Patent Application No. PCT/EP2015/076458, each titled “Tri-Segmented Arenaviruses as Vaccine Vectors,” including any patents that claim priority thereto, the Geneva Licensed Patent Rights, to make, have made, to use and have used, to sell and have sold, to commercialize and have commercialized products, the manufacture, use, or sale of which would infringe a claim of the Geneva Licensed Patent Rights, each a Geneva Licensed Product.

Pursuant to the terms of the Geneva Agreement, we are obligated to use reasonable efforts to develop and make commercially available Geneva Licensed Products. We were also required to provide proof to the University of Geneva that we have filed an IND or an equivalent application for a Geneva Licensed Product within seven years of the effective date of the Geneva Agreement. In June 2019 we informed the University of Geneva about the filing of an IND for a Geneva Licensed Product. The University of Geneva can terminate the Geneva Agreement if we stop the development and/or exploitation of the technology licensed by the University of Geneva to us.

Starting with the third anniversary of the effective date of the Geneva Agreement, we are required to pay the University of Geneva a nominal annual fee, which is deductible from any milestone payments, royalties or sublicense payments payable by us to the University of Geneva during the same fiscal year. We are required to pay the University of Geneva, subject to the achievement by us of specified development and regulatory milestones, payments aggregating up to CHF 290,000 per Geneva Licensed Product. While the Geneva Agreement remains in effect, we are required to pay the University of Geneva low single digit royalties on aggregate net sales of Geneva Licensed Products sold by us. We must also pay the University of Geneva percentages ranging from the low single digits to 10%, decreasing as a Geneva Licensed Product proceeds through development stages, of any consideration we receive from sublicensees, depending on the timing of such sublicense. We are also responsible for the prosecution and maintenance of the Geneva Licensed Patents Rights, including the costs related thereto.

Unless earlier terminated, the Geneva Agreement remains in effect until the expiration of the last to expire of the Geneva Licensed Patent Rights. Following the expiry of the Geneva Agreement due to the last to expire of the Geneva Licensed Patent Rights, we will have a fully paid-up, royalty-free right to use, sell and commercialize Geneva Licensed Products. We or the University of Geneva may terminate the Geneva Agreement for the other party’s breach that remains uncured after 60 days’ notice. We may terminate the Geneva Agreement for convenience upon prior notice. The University of Geneva may terminate the Geneva Agreement if we cease to carry on our business or become insolvent.

35

Table of Contents

University of Basel License Agreement

In January 2017, we entered into an Exclusive License Agreement with the University of Basel, the Basel Agreement. Pursuant to the Basel Agreement, the University of Basel granted us a worldwide, exclusive license under the University of Basel’s share in U.S. Provisional Patent Application No. 62/338,400, titled “Tri-segmented Pichinde viruses as vaccine vectors,” including any patents that claim priority thereto, the Basel Licensed Patent Rights to use the technology titled “tri-segmented Pichinde viruses as vaccine vectors” as covered by the Basel Licensed Patent Rights, to make and have made, to use and have used, to sell and have sold, to commercialize and have commercialized products, the manufacture, use, sale, or importation of which would infringe a claim of the Basel Licensed Patent Rights, each a Basel Licensed Product.

Pursuant to the terms of the Basel Agreement, we are obligated to use reasonable efforts to develop and make commercially available Basel Licensed Products. Beginning on February 28, 2018, and for as long as we have not effected a first commercial use of a Basel Licensed Product, we are required to provide the University of Basel with an annual report detailing our efforts to develop Basel Licensed Products.

We are required to pay the University of Basel, subject to the achievement of specified development and regulatory milestones, payments aggregating up to CHF 265,000 per Basel Licensed Product. While the Basel Agreement remains in effect, we are required to pay the University of Basel low single digit royalties on net sales of Basel Licensed Products. We must also pay the University of Basel a low to high single digit percentage, decreasing as a Basel Licensed Product proceeds through development stages, of any consideration we receive from sublicensees, depending on the timing of such sublicense. We are also responsible for the prosecution and maintenance of the Basel Licensed Patent Rights, and the costs related thereto.

Unless earlier terminated, the Basel Agreement remains in effect until the expiration of the last to expire of the Basel Licensed Patent Rights. Following the expiry of the Basel Agreement due to the last to expire of the Basel Licensed Patent Rights, we will have a fully paid-up, royalty-free right to use, sell and commercialize Basel Licensed Products. We or the University of Basel may terminate the agreement for the other party’s breach that remains uncured after 60 days’ notice. We may terminate the Basel Agreement for convenience upon prior notice. The University of Basel may terminate the Basel Agreement if we cease to pay for the costs associated with prosecution and maintenance of the Basel Licensed Patent Rights.

University of Basel Split License Agreement

In October 2020, we entered into an Exclusive License Agreement with the University of Basel, which was subsequently amended in July 2022 and September 2022, hereinafter referred to as the Basel Split Agreement. Pursuant to the Basel Split Agreement, the University of Basel granted us a worldwide, exclusive license to proprietary patent positions related to a novel molecular strategy to vectorize arenavirus genomes (Split Vector Technology as described in the Intellectual Property Section), the Basel Licensed Split Patent Rights, to make or to have made, to develop or have developed, to use, have used, sell, have sold, market, have marketed, offer for sale, distribute, have distributed, import or have imported products, the manufacture, use, sale, or importation of which would infringe a claim of the Basel Licensed Split Patent Rights, each a Basel Licensed Split Product. Pursuant to the Basel Split Agreement, the University of Basel further granted us a worldwide, exclusive license under the University of Basel’s share in an international PCT application related to certain improvements of the Split Vector Technology, including any patents and patent applications that claim priority thereto, such patents and patent applications are further included in the Basel Licensed Split Patent Rights.

Pursuant to the terms of the Basel Split Agreement, we are obligated to use commercially reasonable efforts to develop and manufacture Basel Licensed Split Products and make commercially available Basel Licensed Split Products in the United States and at least three major European countries. In addition, we have to reach certain pre-clinical and clinical development milestones within specified time periods. Based on technical difficulties and changing priorities / strategic considerations, we did not meet the first pre-clinical milestone as defined in the original Basel Split Agreement and had to pay a re-scheduling fee of CHF 100,000 to University of Basel. We subsequently agreed with the University of Basel to amend the original Basel Split Agreement and entered into an amendment under which we defined a new

36

Table of Contents

pre-clinical development plan and pre-clinical development milestones. Under the respective amendment we further agreed to make additional non-material milestone payments upon achievement of the newly defined pre-clinical development milestones.

Under the amended Basel Split Agreement, we have the right to request postponement of pre-defined pre-clinical or clinical development milestones against payment of rescheduling fees in the range of CHF 250,000 to CHF 1,000,000.

If we fail to perform any of our diligence obligations specified in the Basel Split Agreement, after having exercised all available postponement options, the University of Basel can demand a written development and marketing plan. If we fail to agree with the University of Basel on any amendments to our development and marketing plans based on the procedure specified in the Basel Split Agreement upon such demand for amendments from the University of Basel, the University of Basel has the right to send us a notice of its intention to terminate the Basel Split Agreement. If we are not in agreement, we may request that the matter is assessed by an independent expert arbitrator. If such an expert arbitrator determines that we fail to meet our diligence obligations, the University of Basel may terminate the Basel Split Agreement.

Beginning on January 1, 2021 and ending on the date of the first commercial sale of a Basel Licensed Split Products, we are required to provide the University of Basel with an annual report detailing our efforts to develop Basel Licensed Split Products and to obtain governmental approvals necessary for marketing the same, as well as periodic updates relating to the pre-defined pre-clinical milestones.

We paid the University of Basel nominal amounts upon entering into the agreement as well as upon execution of the second amendment in September 2022 and are required to pay a non-material annual maintenance fee, which is deductible from any milestone payments, royalties or sublicense payments payable by us to the University of Basel during the same year. We are required to pay the University of Basel, subject to the achievement of specified development and regulatory milestones, payments aggregating up to CHF 2,000,000 per Basel Licensed Split Product. While the Basel Split Agreement remains in effect, we are required to pay the University of Basel low single digit royalties on net sales of Basel Licensed Split Products. We must also pay the University of Basel a low double digit to low single digit percentage, decreasing as a Basel Licensed Split Product proceeds through development stages, of any consideration we receive from sublicensees, depending on the timing of such sublicense. We are also responsible for the prosecution and maintenance of the Basel Licensed Split Patent Rights, and the costs related thereto.

Unless earlier terminated, the Basel Split Agreement remains in effect until the expiration of the last to expire of the Basel Licensed Split Patent Rights. Following the expiry of the Basel Split Agreement due to the last to expire of the Basel Licensed Split Patent Rights, we will have a fully paid up, royalty free right to use, sell and commercialize Basel Licensed Split Products. We or the University of Basel may terminate the agreement for the other party’s breach that remains uncured after 60 days’ notice. We may terminate the Basel Agreement for convenience upon prior notice. The University of Basel may terminate the Basel Split Agreement if we file a petition for bankruptcy or insolvency or both, or reorganization relating to bankruptcy or insolvency, or in the event of an adjudication that we have become bankrupt or insolvent or both. The University of Basel may further terminate the Basel Split Agreement if we oppose or dispute the validity of any of the Basel Licensed Split Patent Rights or assist a third party to do the same. If we fail to perform any of our diligence obligations specified in the Basel Split Agreement, after having exercised all available postponement options, and if we fail to agree with the University of Basel on any amendments to our development and marketing plans based on the procedure specified in the Basel Split Agreement upon such demand for amendments from the University of Basel, the University of Basel may terminate the Basel Split Agreement.

University of Zurich License Agreement

In October 2011, we entered into a License Agreement with the University of Zurich, the Zurich Agreement. Pursuant to the Zurich Agreement, the University of Zurich granted us a worldwide, exclusive license to PCT Patent Application No. PCT/EP/08/010994, titled “Propagation deficient arenavirus vectors,” the Zurich Licensed Patent Rights, to make and have made, use, sell, offer for sale, and import products that fall within the scope of the Zurich

37

Table of Contents

Licensed Patent Rights, each a Zurich Licensed Product and to practice the Zurich Licensed Patent Rights and methods that fall within the scope of the Zurich Licensed Patent Rights, each a Zurich Licensed Method.

Pursuant to the terms of the Zurich Agreement, we are obligated to diligently proceed with the development, manufacture, and sale of, and the obtaining of government approvals for the manufacture, use and sale of, suitable Zurich Licensed Products in the United States, Japan and certain European countries. If we fail to use commercially reasonable efforts to do the foregoing, the University of Zurich can demand a written development and marketing plan. Failure of the parties to agree on a development and marketing plan entitles the University of Zurich to terminate the Zurich Agreement. Beginning on January 1, 2012, and ending on the date of the first commercial sale of a Zurich Licensed Product, we are required to provide the University of Zurich with an annual report detailing our efforts to develop and test Zurich Licensed Products and to use the Zurich Licensed Patent Rights and Zurich Licensed Methods.

In consideration for the license granted to us under the Zurich Agreement, we issued 26,744 shares with a nominal value of EUR 2,297 of our common stock to the University of Zurich and agreed to provide them certain antidilution rights, which rights have subsequently expired. We are required to pay the University of Zurich low single digit royalties on net sales of Zurich Licensed Products or Zurich Licensed Methods. We must also pay the University of Zurich percentages ranging from the mid-single digits to 20% of any sublicense fees and consideration we receive from sublicensees, depending on the amount of fees received from sublicensees and the cumulative monetary value of the consideration and fees received from all sublicensees. We are responsible for the prosecution and maintenance of the Zurich Licensed Patent Rights, and the costs related thereto.

Unless earlier terminated, the Zurich Agreement remains in effect on a country-by-country basis until the expiration of the last to expire of the Zurich Licensed Patent Rights in such country. The University of Zurich may terminate the agreement for our uncured breach of any of the terms of the Zurich Agreement or if we oppose or dispute the validity of any of the Zurich Licensed Patent Rights, or assist a third party to do the same. If we fail to use commercially reasonable efforts to market and develop the Zurich Licensed Products in certain countries, and if we fail to agree with the University of Zurich on any amendments to our development and marketing plans within the time specified in the Zurich Agreement upon such demand for amendments from the University of Zurich, the University of Zurich may terminate the Zurich Agreement. We may terminate the Zurich Agreement for convenience upon prior notice. The Zurich Agreement automatically terminates if we file a petition for bankruptcy, insolvency, or reorganization relating to bankruptcy or insolvency, or in the event of an adjudication that we have become bankrupt or insolvent.

National Institutes of Health License Agreement

In September 2013, we entered into a Biological Materials License Agreement with the National Institutes of Health (“NIH”) which was subsequently amended in April 2017, July 2018, January 2021, and May 2021, hereinafter referred to as the NIH Agreement. Pursuant to the NIH Agreement, the NIH granted us a worldwide, nonexclusive license to make, have made, import and use certain cells and cell clones developed at the Vaccine Research Center of the NIH (the “NIH Licensed Products”) to manufacture viral vectors based on our proprietary arenavirus-based vectors.

Pursuant to the terms of the NIH Agreement, we are required to provide the NIH with an annual report which states the number and description of NIH Licensed Products made or otherwise disposed of. We are further responsible for obtaining and maintaining any required third-party license for the background rights for the commercial use of the respective cells and cell clones.

In consideration of the license granted to us pursuant to the NIH Agreement, we paid the NIH a low six figure and a mid-five figure issue royalty, upon execution of the NIH Agreement and the first amendment, respectively. We must also pay the NIH 10% of any consideration we receive from sublicensees. We must also pay the NIH low five figure to mid six figure annual royalty payments, increasing as our most developed product candidate manufactured from NIH Licensed Products proceeds through development stages.

Unless earlier terminated, the NIH Agreement remains in effect for a term of 20 years from the effective date. We have the option to extend the term of the agreement for additional one year periods, upon prior notice to the NIH. The NIH may terminate the NIH Agreement if we are in default in performing any material obligation under the NIH

38

Table of Contents

Agreement and do not remedy such default within a specified period upon notice thereof. We may terminate the NIH Agreement for convenience upon prior notice.

University of Minnesota License Agreement

In October 2022, we entered into a Non-Exclusive License Agreement with the Regents of the University of Minnesota (the “Minnesota Agreement”). Pursuant to the Minnesota Agreement, the University of Minnesota granted us a worldwide, non-exclusive license under the University of Minnesota’s rights in the subject matter of PCT Patent Application No. PCT/US2015/051337 including any patents that claim priority thereto (the “Minnesota Licensed Patent Rights”) to make, have made, sell, have sold, offer to sell, have offered to sell, commercialize, have commercialized, import, have imported, export, have exported, use, have used and otherwise exploit products that are covered by a valid claim of the Minnesota Licensed Patent Rights (and simultaneously covered by a claim of the University of Geneva patent related to our replicating technology which is exclusively licensed to us), (each, a “Minnesota Licensed Product”).

We paid the University of Minnesota a low six figure amount upon entering into the agreement and are required to pay a non-material annual maintenance fee, and, upon commercialization of the first Minnesota Licensed Product, an annual minimum royalty which is creditable against royalties payable in the same year. We are required to pay the University of Minnesota, subject to the achievement of specified regulatory and commercial milestones, payments aggregating up to $2,750,000 per Minnesota Licensed Product. While the Minnesota Agreement remains in effect, we are required to pay the University of Minnesota royalties on aggregate net sales of Minnesota Licensed Products, of a generally below single digit percentage.

We must also pay the University of Minnesota low single digit percentages of certain considerations we receive from sublicensees, subject to pre-defined minimum and maximum payments in the range of a mid five figure amount to a mid six figure amount. We further have to pay the University of Minnesota a nominal amount if we assign the Minnesota Agreement as part of a change of control.

Unless earlier terminated, the Minnesota Agreement remains in effect until the expiration of the last to expire of the Minnesota Licensed Patent Rights. Following the expiry of the Minnesota Agreement due to the last to expire of the Minnesota Licensed Patent Rights, we will have a fully paid-up, royalty-free right to use, sell and commercialize Minnesota Licensed Products. We or the University of Minnesota may terminate the Minnesota Agreement for the other party’s breach that remains uncured after 30 days’ notice. We may terminate the Minnesota Agreement for convenience upon prior notice. The University of Minnesota may terminate the Minnesota Agreement if we cease operations, become insolvent, enter into any bankruptcy, receivership, or similar proceeding, or attempt to use the Minnesota Licensed Patent Rights as collateral for any debt.

Competition

The biotechnology and pharmaceutical industries have made substantial investments in recent years into the rapid development of novel immunotherapies for the treatment of a range of pathologies, including infectious diseases and cancers, making this a highly competitive market.

We face substantial competition from multiple sources, including large and specialty pharmaceutical, biopharmaceutical and biotechnology companies, academic research institutions and governmental agencies and public and private research institutions. Our competitors compete with us on the level of the technologies employed to target various therapeutic areas, such as adoptive cell therapies and active immunization technologies, or on the level of development of product candidates. In addition, many small biotechnology companies have formed collaborations with large, established companies to (i) obtain support for their research, development and commercialization of products or (ii) combine several treatment approaches to develop longer lasting or more efficacious treatments that may potentially directly compete with our current or future product candidates. We anticipate that we will continue to face increasing competition as new therapies and combinations thereof, technologies, and data emerge within the field of immunotherapy and, furthermore, within the treatment of infectious diseases and cancers.

39

Table of Contents

In addition to the current standard of care treatments for patients with infectious diseases or cancers, numerous commercial and academic preclinical studies and clinical trials are being undertaken by a large number of parties to assess novel technologies and product candidates in the field of immunotherapy. Results from these studies and trials have fueled increasing levels of interest in the field of immunotherapy.

Our competitors in the development of product candidates in our lead immunooncology indication of therapies for HPV+ cancers, include, among others, companies such as Cue Biopharma, ISA Pharmaceuticals B.V., Nyode, PDS Biotech, TCR Cure, Transgene and Ultimovacs.

Companies developing technology that competes directly or indirectly with our technology include Abalos GmbH, which is developing mammarenavirus vectors for cancer, and companies developing oncolytic viruses, bispecific antibodies, engineered cell therapies, tumor specific antigens, and other active immunization technologies including, among others, Adaptimmune PLC, BioNTech, CureVac AG, Gritstone Bio, Inc., Merck & Co., Moderna, Novartis, Replimune Group, Inc., Roche and Turnstone Biologics Inc.

Many of our competitors, either alone or in combination with their respective strategic partners, have significantly greater financial resources and expertise in research and development, manufacturing, the regulatory approval process, and marketing than we do. Mergers and acquisition activity in the pharmaceutical, biopharmaceutical and biotechnology sector is likely to result in greater resource concentration among a smaller number of our competitors. Smaller or early-stage companies may also prove to be significant competitors, particularly through sizeable collaborative arrangements with established companies. These competitors also compete with us in recruiting and retaining qualified scientific and management personnel and establishing clinical trial sites and patient registration for clinical trials, as well as in acquiring technologies complementary to, or necessary for, our programs.

Our commercial opportunity could be reduced or eliminated if one or more of our competitors develop and commercialize products that are safer, more effective, better tolerated, or of greater convenience or economic benefit than our proposed product offering. Our competitors also may be in a position to obtain FDA or other regulatory approval for their products more rapidly, resulting in a stronger or dominant market position before we are able to enter the market. The key competitive factors affecting the success of all of our programs are likely to be product safety, efficacy, convenience and treatment cost.

Manufacturing

We have been establishing robust manufacturing processes, reliable assays and strong supply agreements for all of the components used in our product candidates to support ongoing and planned clinical trials. These include the components for our non-replicating based and replicating based product candidates. For GMP production and testing we rely on qualified CMOs to produce and test our clinical material. Currently we do not own or operate manufacturing facilities beyond laboratory scale non-GMP production. We require that our CMOs produce bulk drug substances and finished drug products in accordance with cGMP, and all other applicable laws and regulations. Although we plan to establish our own manufacturing facility in the future, we may continue to rely on CMOs for parts of the process, like filling and labelling of our products for commercial sale, to reduce supply risks and cost of goods sold. We continue to build and maintain agreements with manufacturers that include confidentiality and intellectual property provisions to protect our proprietary rights related to our product candidates.

Although we made the decision to discontinue our current GMP facility project as part of the Reduction Plan announced in January 2024 we plan to ultimately establish our own manufacturing facility in the future.

Government Regulation

Government authorities in the United States at the federal, state and local level and in other countries regulate, among other things, the research, development, testing, manufacture, quality control, approval, labeling, packaging, storage, recordkeeping, promotion, advertising, distribution, post-approval monitoring and reporting, marketing and export and import of biological products, such as those developed from our non-replicating and replicating technologies and any other product candidates we develop. Generally, before a new drug or biologic can be marketed, considerable

40

Table of Contents

data demonstrating its quality, safety and efficacy must be obtained, organized into a format specific for each regulatory authority, submitted for review and approved by the regulatory authority.

U.S. Biological Product Development

In the United States, the FDA regulates drugs under the Federal Food, Drug, and Cosmetic Act (“FDCA”) and its implementing regulations and biologics under the FDCA, the Public Health Service Act (“PHSA”) and their implementing regulations. Both drugs and biologics also are subject to other federal, state and local statutes and regulations. The process of obtaining regulatory approvals and the subsequent compliance with appropriate federal, state and local statutes and regulations requires the expenditure of substantial time and financial resources. Failure to comply with the applicable U.S. requirements at any time during the product development process, approval process or post-market may subject an applicant to administrative or judicial sanctions. These sanctions could include, among other actions, the FDA’s refusal to approve pending applications, withdrawal of an approval, license revocation, a clinical hold, untitled or warning letters, product recalls or market withdrawals, product seizures, total or partial suspension of production or distribution, injunctions, fines, refusals of government contracts, restitution, disgorgement and civil or criminal penalties. Any agency or judicial enforcement action could have a material adverse effect on us.

Our product candidates and any future biological product candidates we develop must be approved by the FDA through a biologics license application (BLA) process before they may be legally marketed in the United States. The BLA is a request for approval to market the biologic for one or more specified indications and must contain proof of safety, purity and potency. The FDA review and approval process generally involves the following:

The preclinical and clinical testing and approval process requires substantial time, effort and financial resources, and we cannot be certain that any approvals for our product candidates will be granted on a timely basis, or at all.

41

Table of Contents

Preclinical Studies and IND

Preclinical studies include laboratory evaluation of product chemistry and formulation, as well as in vitro and animal studies to assess the potential for adverse events and in some cases to establish a rationale for therapeutic use. The conduct of preclinical studies is subject to federal regulations and requirements, including GLP regulations for safety/toxicology studies.

An IND sponsor must submit the results of the preclinical studies, together with manufacturing information, analytical data, any available clinical data or literature and plans for clinical trials, among other things, to the FDA as part of an IND. An IND is a request for authorization from the FDA to administer an investigational product to humans and must become effective before human clinical trials may begin. Some long-term preclinical testing may continue after the IND is submitted. An IND automatically becomes effective 30 days after receipt by the FDA, unless before that time, the FDA raises concerns or questions related to one or more proposed clinical trials and places the trial on clinical hold. In such a case, the IND sponsor and the FDA must resolve any outstanding concerns before the clinical trial can begin. As a result, submission of an IND may not result in the FDA allowing clinical trials to commence.

Clinical Trials

The clinical stage of development involves the administration of the investigational product to healthy volunteers or patients under the supervision of qualified investigators, generally physicians not employed by or under the trial sponsor’s control, in accordance with GCP requirements, which include the requirement that all research subjects provide their informed consent for their participation in any clinical trial. Clinical trials are conducted under protocols detailing, among other things, the objectives of the clinical trial, dosing procedures, subject selection and exclusion criteria and the parameters to be used to monitor subject safety and assess efficacy. Each protocol, and any subsequent amendments to the protocol, must be submitted to the FDA as part of the IND. Further, each clinical trial must be reviewed and approved by an IRB for each institution at which the clinical trial will be conducted to ensure that the risks to individuals participating in the clinical trials are minimized and are reasonable in relation to anticipated benefits. The IRB also approves the informed consent form that must be provided to each clinical trial subject or his or her legal representative and must monitor the clinical trial until completed. There also are requirements governing the reporting of ongoing clinical trials and completed clinical trial results to public registries.

A sponsor who wishes to conduct a clinical trial outside of the United States may, but need not, obtain FDA authorization to conduct the clinical trial under an IND. If a foreign clinical trial is not conducted under an IND, the sponsor may submit data from the clinical trial to the FDA in support of a BLA. The FDA will accept a well designed and well conducted foreign clinical trial not conducted under an IND if the study was conducted in accordance with GCP requirements, and the FDA is able to validate the data through an onsite inspection if deemed necessary.

Clinical trials generally are conducted in three sequential phases, known as Phase 1, Phase 2 and Phase 3, and may overlap.

42

Table of Contents

Post-approval trials, sometimes referred to as Phase 4 clinical trials, may be conducted after initial marketing approval. These trials are used to gain additional experience from the treatment of patients in the intended therapeutic indication. In certain instances, the FDA may mandate the performance of Phase 4 clinical trials as a condition of approval of a BLA. Failure to exhibit due diligence with regard to conducting required Phase 4 clinical trials could result in withdrawal of approval for products.

Progress reports detailing the results of the clinical trials, among other information, must be submitted at least annually to the FDA and written IND safety reports must be submitted to the FDA and the investigators fifteen days after the trial sponsor determines the information qualifies for reporting for serious and unexpected suspected adverse events, findings from other studies or animal or in vitro testing that suggest a significant risk for human subjects and any clinically important increase in the rate of a serious suspected adverse reaction over that listed in the protocol or investigator brochure. The sponsor must also notify the FDA of any unexpected fatal or life-threatening suspected adverse reaction as soon as possible but in no case later than seven calendar days after the sponsor’s initial receipt of the information.

Phase 1, Phase 2 and Phase 3 clinical trials may not be completed successfully within any specified period, if at all. The FDA or the sponsor may suspend or terminate a clinical trial at any time on various grounds, including a finding that the research subjects or patients are being exposed to an unacceptable health risk. Similarly, an IRB can suspend or terminate approval of a clinical trial at its institution if the clinical trial is not being conducted in accordance with the IRB’s requirements or if the biologic has been associated with unexpected serious harm to patients. Additionally, some clinical trials are overseen by an independent group of qualified experts organized by the clinical trial sponsor, known as a data safety monitoring board or committee. This group provides authorization for whether a trial may move forward at designated check points based on access to certain data from the trial. Concurrent with clinical trials, companies usually complete additional animal studies and also must develop additional information about the chemistry and physical characteristics of the biologic as well as finalize a process for manufacturing the product in commercial quantities in accordance with cGMP requirements. The manufacturing process must be capable of consistently producing quality batches of the product and, among other things, companies must develop methods for testing the identity, strength, quality and purity of the final product. Additionally, appropriate packaging must be selected and tested and stability studies must be conducted to demonstrate that the product candidates do not undergo unacceptable deterioration over their shelf life.

FDA Review Process

Following completion of the clinical trials, data are analyzed to assess whether the investigational product is safe and effective for the proposed indicated use or uses. The results of preclinical studies and clinical trials are then submitted to the FDA as part of a BLA, along with proposed labeling, chemistry and manufacturing information to ensure product quality and other relevant data. The BLA may include both negative and ambiguous results of preclinical studies and clinical trials, as well as positive findings. Data may come from company sponsored clinical trials intended to test the safety and efficacy of a product’s use or from a number of alternative sources, including studies initiated by investigators. To support marketing approval, the data submitted must be sufficient in quality and quantity to establish the safety, purity and potency of the investigational product to the satisfaction of FDA. FDA approval of a BLA must be obtained before a biologic may be marketed in the United States.

Under the Prescription Drug User Fee Act (PDUFA) as amended, each BLA must be accompanied by a user fee. The FDA adjusts the PDUFA user fees on an annual basis. Fee waivers or reductions are available in certain circumstances, including a waiver of the application fee for the first application filed by a small business. Additionally, no user fees are assessed on BLAs for products designated as orphan drugs, unless the product also includes a non-orphan indication.

The FDA reviews all submitted BLAs before it accepts them for filing and may request additional information rather than accepting the BLA for filing. The FDA decides whether to accept a BLA for filing within 60 days of receipt, and such decision could include a refusal to file by the FDA. Once the submission is accepted for filing, the FDA begins an in-depth review of the BLA. Under the goals and policies agreed to by the FDA under PDUFA, the FDA has ten months, from the filing date, in which to complete its initial review of an original BLA and respond to the applicant, and

43

Table of Contents

six months from the filing date of an original BLA designated for priority review. The FDA does not always meet its PDUFA goal dates for standard and priority BLAs, and the review process is often extended by FDA requests for additional information or clarification.

Before approving a BLA, the FDA will conduct a preapproval inspection of the manufacturing facilities for the new product to determine whether they comply with cGMP requirements. The FDA will not approve the product unless it determines that the manufacturing processes and facilities are in compliance with cGMP requirements and adequate to assure consistent production of the product within required specifications. The FDA also may audit data from clinical trials to ensure compliance with GCP requirements. Additionally, the FDA may refer applications for novel products or products which present difficult questions of safety or efficacy to an advisory committee, typically a panel that includes clinicians and other experts, for review, evaluation and a recommendation as to whether the application should be approved and under what conditions, if any. The FDA is not bound by recommendations of an advisory committee, but it considers such recommendations when making decisions on approval. The FDA likely will reanalyze the clinical trial data, which could result in extensive discussions between the FDA and the applicant during the review process. After the FDA evaluates a BLA, it will issue an approval letter or a Complete Response Letter. An approval letter authorizes commercial marketing of the biologic with specific prescribing information for specific indications. A Complete Response Letter indicates that the review cycle of the application is complete, and the application will not be approved in its present form. A Complete Response Letter usually describes all of the specific deficiencies in the BLA identified by the FDA. The Complete Response Letter may require additional clinical data, pivotal Phase 3 clinical trial(s) as well as other significant and time-consuming requirements related to clinical trials, preclinical studies or manufacturing. If a Complete Response Letter is issued, the applicant may either resubmit the BLA, addressing all of the deficiencies identified in the letter, or withdraw the application. Even if such data and information are submitted, the FDA may decide that the BLA does not satisfy the criteria for approval. Data obtained from clinical trials are not always conclusive and the FDA may interpret data differently than we interpret the same data.

Orphan Drug Designation

Under the Orphan Drug Act, the FDA may grant orphan designation to a drug or biological product intended to treat a rare disease or condition, which is generally a disease or condition that affects fewer than 200,000 individuals in the United States, or more than 200,000 individuals in the United States and for which there is no reasonable expectation that the cost of developing and making the product available in the United States for this type of disease or condition will be recovered from sales of the product.

Orphan drug designation for a biologic must be requested before submitting a BLA. After the FDA grants orphan drug designation, the identity of the therapeutic agent and its potential orphan use are disclosed publicly by the FDA. Orphan drug designation does not convey any advantage in or shorten the duration of the regulatory review and approval process.

If a product that has orphan drug designation subsequently receives the first FDA approval for the disease or condition for which it has such designation, the product is entitled to orphan drug exclusivity, which means that the FDA may not approve any other applications to market the same drug for the same indication for seven years from the date of such approval, except in limited circumstances, such as a showing of clinical superiority to the product with orphan exclusivity by means of greater effectiveness, greater safety or providing a major contribution to patient care or in instances of drug supply issues. Competitors, however, may receive approval of either a different product for the same indication or the same product for a different indication but that could be used off-label in the orphan indication. Orphan drug exclusivity also could block the approval of one of our products for seven years if a competitor obtains approval before we do for the same product, as defined by the FDA, for the same indication we are seeking approval, or if our product is determined to be contained within the scope of the competitor’s product for the same indication or disease. If one of our products designated as an orphan drug receives marketing approval for an indication broader than that which is designated, it may not be entitled to orphan drug exclusivity. Orphan drug status in the European Union (EU) has similar, but not identical, requirements and benefits.

44

Table of Contents

Expedited Development and Review Programs

FDA provides programs intended to facilitate and expedite development and review of new products that are intended to address an unmet medical need in the treatment of a serious or life-threatening disease or condition. These programs are referred to as fast-track designation, breakthrough therapy designation, priority review, and accelerated approval. These designations are not mutually exclusive, and a product candidate may qualify for one or more of these programs.

The fast-track program is intended to expedite or facilitate the process for reviewing new drugs and biologics that meet certain criteria. Specifically, new drugs and biologics are eligible for fast-track designation if they are intended to treat a serious or life-threatening condition and preclinical or clinical data demonstrate the potential to address unmet medical needs for the condition. Fast-track designation applies to both the product and the specific indication for which it is being studied. The sponsor of a biologic can request the FDA to designate the product for fast-track status any time before receiving BLA approval, but ideally no later than the pre-BLA meeting.

A product that receives fast-track program designation, may also be eligible for other types of FDA programs intended to expedite development and review, such as priority review and accelerated approval. Any product is eligible for priority review if it treats a serious or life-threatening condition and, if approved, would provide a significant improvement in safety and effectiveness compared to available therapies. The FDA will attempt to direct additional resources to the evaluation of an application for a new drug or biologic designated for priority review in an effort to facilitate the review.

A product may also be eligible for accelerated approval, if it treats a serious or life-threatening condition and generally provides a meaningful advantage over available therapies. In addition, it must demonstrate an effect on a surrogate endpoint that is reasonably likely to predict clinical benefit or on a clinical endpoint that can be measured earlier than irreversible morbidity or mortality (IMM) that is reasonably likely to predict an effect on IMM or other clinical benefit. As a condition of approval, the FDA may require that a sponsor of a drug or biologic receiving accelerated approval perform adequate and well-controlled post-marketing clinical trials. Under the Food and Drug Omnibus Reform Act of 2022 (FDORA), the FDA is now permitted to require, as appropriate, that such trials be underway prior to approval or within a specific time period after the date of approval for a product granted accelerated approval. Sponsors are also required to send updates to the FDA every 180 days on the status of such studies, including progress toward enrollment targets, and the FDA must promptly post this information publicly. Under FDORA, the FDA has increased authority for expedited procedures to withdraw approval of a drug or indication approved under accelerated approval if, for example, the sponsor fails to conduct such studies in a timely manner and send the necessary updates to the FDA, or if a confirmatory trial fails to verify the predicted clinical benefit of the product. In addition, the FDA generally requires, unless otherwise informed by the agency, pre-approval of promotional materials, which could adversely impact the timing of the commercial launch of the product.

Additionally, a drug or biologic may be eligible for designation as a breakthrough therapy if the product is intended, alone or in combination with one or more other drugs or biologics, to treat a serious or life-threatening condition and preliminary clinical evidence indicates that the product may demonstrate substantial improvement over currently approved therapies on one or more clinically significant endpoints. The benefits of breakthrough therapy designation include the same benefits as fast-track designation, plus intensive guidance from the FDA to ensure an efficient drug development program.

Fast-track designation, priority review, accelerated approval and breakthrough therapy designation do not change the standards for approval, but may expedite the development or approval process.

Pediatric Information

Under the Pediatric Research Equity Act (PREA), a BLA or supplement to a BLA must contain data to assess the safety and efficacy of the biologic for the claimed indications in all relevant pediatric subpopulations and to support dosing and administration for each pediatric subpopulation for which the product is safe and effective. The FDA may grant deferrals for submission of pediatric data or full or partial waivers. The Food and Drug Administration Safety and

45

Table of Contents

Innovation Act (FDASIA) amended the FDCA to require that a sponsor who is planning to submit a marketing application for a drug that includes a new active ingredient, new indication, new dosage form, new dosing regimen or new route of administration submit an initial Pediatric Study Plan (PSP) within 60 days of an end of Phase 2 meeting or, if there is no such meeting, as early as practicable before the initiation of the Phase 3 or Phase 2/3 study. The initial PSP must include an outline of the pediatric study or studies that the sponsor plans to conduct, including study objectives and design, age groups, relevant endpoints and statistical approach, or a justification for not including such detailed information, and any request for a deferral of pediatric assessments or a full or partial waiver of the requirement to provide data from pediatric studies along with supporting information. The FDA and the sponsor must reach an agreement on the PSP. A sponsor can submit amendments to an agreed upon initial PSP at any time if changes to the pediatric plan need to be considered based on data collected from preclinical studies, early phase clinical trials as well as other clinical development programs.

Post-Marketing Requirements

Following approval of a new product, the manufacturer and the approved product are subject to continuing regulation by the FDA, including, among other things, monitoring and recordkeeping activities, reporting of adverse experiences, complying with promotion and advertising requirements, which include restrictions on promoting products for unapproved uses or patient populations (known as “off-label use”) and limitations on industry sponsored scientific and educational activities. Although physicians may prescribe legally available products for off-label uses, manufacturers may not market or promote such uses. Prescription drug and biologic promotional materials must be submitted to the FDA in conjunction with their first use. Further, if there are any modifications to the biologic, including changes in indications, labeling or manufacturing processes or facilities, the applicant may be required to submit and obtain FDA approval of a new BLA or BLA supplement, which may require the development of additional data or preclinical studies and clinical trials.

The FDA may also place other conditions on approvals including the requirement for a Risk Evaluation and Mitigation Strategy (REMS) to assure the safe use of the product. If the FDA concludes a REMS is needed, the sponsor of the BLA must submit a proposed REMS. The FDA will not approve the BLA without an approved REMS, if required. A REMS could include medication guides, physician communication plans or elements to assure safe use, such as restricted distribution methods, patient registries and other risk minimization tools. Any of these limitations on approval or marketing could restrict the commercial promotion, distribution, prescription or dispensing of products. Product approvals may be withdrawn for non-compliance with regulatory standards or if problems occur following initial marketing.

FDA regulations require that products be manufactured in specific facilities and in accordance with cGMP regulations. We rely, and expect to continue to rely, on third parties for the production of clinical and commercial quantities of our products in accordance with cGMP regulations. These manufacturers must comply with cGMP regulations that require, among other things, quality control and quality assurance, the maintenance of records and documentation and the obligation to investigate and correct any deviations from cGMP. Manufacturers and other entities involved in the manufacture and distribution of approved drugs or biologics are required to register their establishments with the FDA and certain state agencies and are subject to periodic unannounced inspections by the FDA and certain state agencies for compliance with cGMP requirements and other laws, including applicable product tracking and tracing requirements. Accordingly, manufacturers must continue to expend time, money and effort in the area of production and quality control to maintain cGMP compliance. The discovery of violations, including failure to conform to cGMP regulations, could result in enforcement actions, and the discovery of post-approval problems with a product may result in restrictions on a product, manufacturer or holder of an approved BLA, including recall.

Other U.S. Healthcare Laws

Manufacturing, sales, promotion and other activities following product approval are also subject to regulation by numerous regulatory authorities in the United States in addition to the FDA, including the Centers for Medicare & Medicaid Services (“CMS”), other divisions of the Department of Health and Human Services (HHS), the Department of Justice, the Drug Enforcement Administration, the Consumer Product Safety Commission, the Federal Trade

46

Table of Contents

Commission, the Occupational Safety & Health Administration, the Environmental Protection Agency and state and local governments.

Healthcare providers, physicians and third-party payors in the United States and elsewhere play a primary role in the recommendation and prescription of pharmaceutical products. Arrangements with third-party payors and customers can expose pharmaceutical manufactures to broadly applicable fraud and abuse and other healthcare laws and regulations, including, without limitation, the federal Anti-Kickback Statute and the federal False Claims Act (FCA) which may constrain the business or financial arrangements and relationships through which companies sell, market and distribute pharmaceutical products. In addition, transparency laws and patient privacy regulations by federal and state governments and by governments in foreign jurisdictions can apply to the manufacturing, sales, promotion and other activities of pharmaceutical manufactures. These laws include:

47

Table of Contents

Additionally, we are subject to state and foreign equivalents of each of the healthcare laws and regulations described above, among others, some of which may be broader in scope and may apply regardless of the payor. Many U.S. states have adopted laws similar to the federal Anti-Kickback Statute and FCA, and may apply to our business practices, including, but not limited to, research, distribution, sales or marketing arrangements and claims involving healthcare items or services reimbursed by non-governmental payors, including private insurers. In addition, some states have passed laws that require pharmaceutical companies to comply with the April 2003 Office of Inspector General Compliance Program Guidance for Pharmaceutical Manufacturers and/or the Pharmaceutical Research and Manufacturers of America’s Code on Interactions with Healthcare Professionals. Several states also impose other marketing restrictions or require pharmaceutical companies to make marketing or price disclosures to the state and require the registration of pharmaceutical sales representatives. State and foreign laws, including for example the EU General Data Protection Regulation (EU GDPR), also govern the privacy and security of health information in some circumstances, many of which differ from each other in significant ways and often are not preempted by HIPAA, thus complicating compliance efforts. There are ambiguities as to what is required to comply with these state requirements and if we fail to comply with an applicable state law requirement we could be subject to penalties. Finally, there are state and foreign laws governing the privacy and security of health information, many of which differ from each other in significant ways and often are not preempted by HIPAA, thus complicating compliance efforts.

The scope and enforcement of each of these laws is uncertain and subject to rapid change in the current environment of healthcare reform, especially in light of the lack of applicable precedent and regulations with respect to certain laws. Federal and state enforcement bodies have recently increased their scrutiny of interactions between healthcare companies and healthcare providers, which has led to a number of investigations, prosecutions, convictions and settlements in the healthcare industry. Prohibitions or restrictions on sales or withdrawal of future marketed products could materially affect our business in an adverse way. Changes in regulations, statutes or the interpretation of existing regulations could impact our business in the future by requiring, for example: (i) changes to our manufacturing arrangements; (ii) additions or modifications to product labeling; (iii) the recall or discontinuation of our products; or (iv) additional record-keeping requirements. If any such changes were to be imposed, they could adversely affect the operation of our business.

48

Table of Contents

Ensuring our business arrangements comply with applicable healthcare laws, as well as responding to possible investigations by government authorities, can be time and resource consuming and can divert a company’s attention from the business.

The failure to comply with any of these laws or regulatory requirements may subject companies to possible legal or regulatory action. Depending on the circumstances, failure to meet applicable regulatory requirements can result in significant civil, criminal and administrative penalties, damages, fines, disgorgement, individual imprisonment, possible exclusion from participation in federal and state funded healthcare programs, contractual damages and the curtailment or restricting of our operations, as well as additional reporting obligations and oversight if we become subject to a corporate integrity agreement or other agreement to resolve allegations of non-compliance with these laws. Any action for violation of these laws, even if successfully defended, could cause a pharmaceutical company to incur significant legal expenses and divert management’s attention from the operation of the business. Further, defending against any such actions can be costly and time consuming, and may require significant financial and personnel resources. Therefore, even if we are successful in defending against any such actions that may be brought against us, our business may be impaired. If any of the physicians or other providers or entities with whom we expect to do business are found to not be in compliance with applicable laws, they may be subject to criminal, civil or administrative sanctions, including exclusions from government funded healthcare programs and imprisonment. If any of the above occur, our ability to operate our business and our results of operations could be adversely affected.

U.S. Healthcare Reform

In the United States, there have been and continue to be a number of legislative initiatives to contain healthcare costs. For example, in 2010, the ACA was passed, which substantially changed the way healthcare is financed by both governmental and private insurers, and significantly impacts the U.S. pharmaceutical industry. The ACA, among other things, subjects biological products to potential competition by lower cost biosimilars, increases the minimum Medicaid rebates owed by manufacturers under the Medicaid Drug Rebate Program extends the rebate program to individuals enrolled in Medicaid managed care organizations, establishes annual fees and taxes on manufacturers of certain branded prescription drugs, and creates a new Medicare Part D coverage gap discount program, in which manufacturers must agree to offer 70% point-of-sale discounts off negotiated prices of applicable brand drugs to eligible beneficiaries during their coverage gap period, as a condition to coverage under Medicare Part D for the manufacturer’s outpatient drugs.

Other legislative changes have been proposed and adopted in the United States since the ACA was enacted. The Budget Control Act of 2011, among other things, created measures for spending reductions by Congress. This includes aggregate reductions of Medicare payments to providers of 2% per fiscal year, which remain in effect through 2032, absent additional congressional action. Due to the Statutory Pay-As-You-Go Act of 2010, estimated budget deficit increases resulting from the American Rescue Plan Act of 2021, and subsequent legislation, Medicare payments to providers will be further reduced starting in 2025 absent further legislation. The U.S. American Taxpayer Relief Act of 2012 further reduced Medicare payments to several types of providers and increased the statute of limitations period for the government to recover overpayments to providers from three to five years.

Further, on May 30, 2018, the Right to Try Act, was signed into law. The law, among other things, provides a federal framework for certain patients to access certain investigational new drug products that have completed a Phase 1 clinical trial and that are undergoing investigation for FDA approval. Under certain circumstances, eligible patients can seek treatment without enrolling in clinical trials and without obtaining FDA permission under the FDA expanded access program. There is no obligation for a pharmaceutical manufacturer to make its drug products available to eligible patients as a result of the Right to Try Act.

Moreover, payment methodologies may be subject to changes in healthcare legislation and regulatory initiatives which could limit the amounts that federal and state governments will pay for healthcare products and services and result in reduced demand for certain pharmaceutical products or additional pricing pressures.

Additionally, there has been increasing legislative and enforcement interest in the United States with respect to specialty drug pricing practices. Specifically, there have been several recent U.S. congressional inquiries and proposed and enacted federal and state legislation designed to, among other things, bring more transparency to drug pricing,

49

Table of Contents

reduce the cost of prescription drugs under Medicare, review the relationship between pricing and manufacturer patient programs, and reform government program reimbursement methodologies for drugs. President Biden has issued multiple executive orders that have sought to reduce prescription drug costs. Although a number of these and other proposed measures may require authorization through additional legislation to become effective, and the Biden administration may reverse or otherwise change these measures, both the Biden administration and Congress have indicated that they will continue to seek new legislative measures to control drug costs.

The Inflation Reduction Act of 2022 (IRA) includes several provisions that may impact our business to varying degrees, including provisions that reduce the out-of-pocket spending cap for Medicare Part D beneficiaries from $7,050 to $2,000 starting in 2025, thereby effectively eliminating the coverage gap; impose new manufacturer financial liability on certain drugs under Medicare Part D, allow the U.S. government to negotiate Medicare Part B and Part D price caps for certain high-cost drugs and biologics without generic or biosimilar competition; require companies to pay rebates to Medicare for certain drug prices that increase faster than inflation; and delay until January 1, 2032 the implementation of the HHS rebate rule that would have limited the fees that pharmacy benefit managers can charge. Further, under the IRA, orphan drugs are exempted from the Medicare drug price negotiation program, but only if they have one rare disease designation and for which the only approved indication is for that disease or condition. If a product receives multiple rare disease designations or has multiple approved indications, it may not qualify for the orphan drug exemption. These provisions take effect progressively starting in fiscal year 2023. On August 29, 2023, HHS announced the list of the first ten drugs that will be subject to price negotiations, although the Medicare drug price negotiation program is currently subject to legal challenges. The effects of the IRA on our business and the healthcare industry in general is not yet known. In response to the Biden administration’s October 2022 executive order, on February 14, 2023, HHS released a report outlining three new models for testing by the CMS Innovation Center which will be evaluated on their ability to lower the cost of drugs, promote accessibility, and improve quality of care. It is unclear whether the models will be utilized in any health reform measures in the future. Further, on December 7, 2023, the Biden administration announced an initiative to control the price of prescription drugs through the use of march-in rights under the Bayh-Dole Act. On December 8, 2023, the National Institute of Standards and Technology published for comment a Draft Interagency Guidance Framework for Considering the Exercise of March-In Rights which for the first time includes the price of a product as one factor an agency can use when deciding to exercise march-in rights. While march-in rights have not previously been exercised, it is uncertain if that will continue under the new framework.

At the state level, legislatures have increasingly passed legislation and implemented regulations designed to control pharmaceutical product pricing, including price or patient reimbursement constraints, discounts, restrictions on certain product access and marketing cost disclosure and transparency measures, and, in some cases, designed to encourage importation from other countries and bulk purchasing.

In the United States, there has also been a lot of legislative activity at the state level with respect to privacy regulation. For example, in California, the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act of 2020 (“CPRA”) (collectively the “CCPA”), broadly defines personal information and creates individual privacy rights and protections for California consumers (as defined in the law), places increased privacy and security obligations on entities handling personal data of consumers or households, and provides for civil penalties for violations and a private right of action for data breaches. The CCPA requires covered companies to provide certain disclosures to consumers about its data collection, use and sharing practices, and to provide affected California residents with ways to opt-out of certain sales or transfers of personal information. While there is an exception for protected health information that is subject to HIPAA and clinical trial regulations, the CCPA may impact our business activities if we become a "Business" regulated by the scope of the CCPA. Additionally, as of January 1, 2023, the effective date for the CPRA’s amendments to the CCPA, California has a new state agency that is vested with authority to implement and enforce the CCPA. In addition to the CCPA, numerous other U.S. states – including Virginia, Colorado, Connecticut, and Utah – have enacted comprehensive privacy laws that are substantially similar in scope and contain many of the same requirements and exceptions as the CCPA, including exemptions for clinical trial data and limited obligations for entities regulated by HIPAA. In addition, Congress regularly contemplates passing comprehensive privacy legislation at the federal level, reflecting a trend toward more stringent privacy legislation in the U.S., which trend may accelerate in the future. The effects of the CCPA, and other similar state or federal laws, are potentially significant and may require us to modify our data processing practices and policies and to incur substantial costs and potential liability in an effort to comply with such legislation. The existence of comprehensive privacy laws in different states in the country could make

50

Table of Contents

our compliance obligations more complex and costly and may increase the likelihood that we may be subject to enforcement actions or otherwise incur liability for noncompliance.

U.S. Patent Term Restoration and Marketing Exclusivity

Depending upon the timing, duration and specifics of FDA approval of our product candidates and any future product candidates we develop, some of our U.S. patents may be eligible for limited patent term extension under the Drug Price Competition and Patent Term Restoration Act of 1984, commonly referred to as the Hatch Waxman Amendments. The Hatch Waxman Amendments permit restoration of the patent term of up to five years as compensation for patent term lost during product development and FDA regulatory review process. Patent term restoration, however, cannot extend the remaining term of a patent beyond a total of 14 years from the product’s approval date. The patent term restoration period is generally one-half the time between the effective date of an IND and the submission date of a BLA plus the time between the submission date of a BLA and the approval of that application, except that the review period is reduced by any time during which the applicant failed to exercise due diligence. Only one patent applicable to an approved drug is eligible for the extension and the application for the extension must be submitted prior to the expiration of the patent. The U.S. Patent and Trademark Office (USPTO) in consultation with the FDA, reviews and approves the application for any patent term extension or restoration. In the future, we may apply for restoration of patent term for our currently owned or licensed patents to add patent life beyond its current expiration date, depending on the expected length of the clinical trials and other factors involved in the filing of the relevant BLA.

An abbreviated approval pathway for biological products shown to be similar to, or interchangeable with, an FDA licensed reference biological product was created by the Biologics Price Competition and Innovation Act of 2009. Biosimilarity, which requires that the biological product be highly similar to the reference product notwithstanding minor differences in clinically inactive components and that there be no clinically meaningful differences between the product and the reference product in terms of safety, purity and potency, can be shown through analytical studies, animal studies and a clinical trial or trials. Interchangeability requires that a biological product be biosimilar to the reference product and that the product can be expected to produce the same clinical results as the reference product in any given patient and, for products administered multiple times to an individual, that the product and the reference product may be alternated or switched after one has been previously administered without increasing safety risks or risks of diminished efficacy relative to exclusive use of the reference biological product without such alternation or switch. A reference biological product is granted 12 years of data exclusivity from the time of first licensure of the product, and the FDA will not accept an application for a biosimilar or interchangeable product based on the reference biological product until four years after the date of first licensure of the reference product. “First licensure” typically means the initial date the particular product at issue was licensed in the United States. Date of first licensure does not include the date of licensure of (and a new period of exclusivity is not available for) a biological product if the licensure is for a supplement for the biological product or for a subsequent application by the same sponsor or manufacturer of the biological product (or licensor, predecessor in interest, or other related entity) for a change (not including a modification to the structure of the biological product) that results in a new indication, route of administration, dosing schedule, dosage form, delivery system, delivery device or strength, or for a modification to the structure of the biological product that does not result in a change in safety, purity, or potency. Therefore, one must determine whether a new product includes a modification to the structure of a previously licensed product that results in a change in safety, purity, or potency to assess whether the licensure of the new product is a first licensure that triggers its own period of exclusivity. Whether a subsequent application, if approved, warrants exclusivity as the “first licensure” of a biological product is determined on a case-by-case basis with data submitted by the sponsor.

Pediatric exclusivity is another type of regulatory market exclusivity in the United States. Pediatric exclusivity, if granted, adds six months to existing regulatory exclusivity periods. This six-month exclusivity may be granted based on the voluntary completion of a pediatric trial in accordance with an FDA issued “Written Request” for such a trial.

European Union Drug Development

In the EU our future products also may be subject to extensive regulatory requirements. As in the United States, medicinal products can be marketed only if a marketing authorization from the competent regulatory authorities has been obtained.

51

Table of Contents

Similar to the United States, the various phases of preclinical and clinical research in the European Union are subject to significant regulatory controls. In April 2014, the EU adopted the new Clinical Trials Regulation (EU) No 536/2014 (CTR), which entered into application on January 31, 2022, repealing and replacing the Clinical Trials Directive 2001/20/EC (CTD). The extent to which on-going clinical trials will be governed by the CTR will depend on the duration of the individual clinical trial. For clinical trials in relation to which an application for approval was made on the basis of the CTD before January 31, 2023, the CTD will continue to apply on a transitional basis until January 31, 2025. By that date, all ongoing trials will become subject to the provisions of the CTR. The CTR will apply to clinical trials from an earlier date if the related clinical trial application was made on the basis of the CTR or if the clinical trial has already transitioned to the CTR framework before January 31, 2025.

The CTR aims to simplify and streamline the approval of clinical trials in the EU, simplify adverse-event reporting procedures, improve the supervision of clinical trials and increase transparency. The main characteristics of the regulation include: a streamlined application procedure via a single-entry point through the Clinical Trials Information System (“CTIS”); a single set of documents to be prepared and submitted for the application as well as simplified reporting procedures for clinical trial sponsors; and a harmonized procedure for the assessment of applications for clinical trials, which is divided in two parts. Part I assessment is led by the competent authorities of a reference Member State selected by the trial sponsor and relates to clinical trial aspects that are considered to be scientifically harmonized across EU Member States. This assessment is then submitted to the competent authorities of all concerned Member States in which the trial is to be conducted for their review. Part II is assessed separately by the competent authorities and Ethics Committees in each Member State concerned. Individual EU Member States retain the power to authorize the conduct of clinical trials on their territory. Strict deadlines have been established for the assessment of clinical trial applications. The role of the relevant ethics committees in the assessment procedure will continue to be governed by the national law of the concerned EU Member State. However, overall related timelines will be defined by the Regulation.

European Union Drug Review and Approval

In the EU, medicinal products can only be commercialized after obtaining a marketing authorization (“MA”). To obtain an MA for a product in the EU, an applicant must submit a Marketing Authorization Application, or MAA, either under a centralized procedure administered by the European Medicines Agency, or EMA, or one of the procedures administered by the competent authorities of EU Member States (decentralized procedure, national procedure or mutual recognition procedure). An MA may be granted only to an applicant established in the EU.

The centralized procedure provides for the grant of a single MA is issued by the European Commission, based on the opinion of the Committee for Medicinal Products for Human Use (“CHMP”) of the EMA, that is valid throughout the entire territory of the European Economic Area (“EEA”) (which comprises the 27 EU Member States, Iceland, Liechtenstein and Norway). The centralized procedure is mandatory for certain types of products, such as medicines produced by biotechnological processes, products designated as orphan medicinal products, advanced therapy medicines (i.e. gene therapy, somatic cell therapy or tissue engineered medicines) and medicinal products containing a new active substance indicated for the treatment of HIV, AIDS, cancer, neurodegenerative disorders, diabetes, auto-immune and other immune dysfunctions and viral diseases. The centralized procedure is optional for products containing a new active substance indicated for the treatment of other diseases and products not yet authorized in the EU, or for products that constitute a significant therapeutic, scientific or technical innovation or which are in the interest of public health in the EEA.

Under the centralized procedure, the CHMP is responsible for conducting the initial assessment of a product and for several post-authorization and maintenance activities, such as the assessment of modifications or extensions to an existing MA. Under the centralized procedure in the EU, the maximum timeframe for the evaluation of an MAA by the EMA is 210 days, excluding clock stops, when additional written or oral information is to be provided by the applicant in response to questions asked by the CHMP. Clock stops may extend the timeframe of evaluation of an MAA considerably beyond 210 days. Where the CHMP gives a positive opinion, it provides the opinion together with supporting documentation to the European Commission, who adopts the final decision in relation to a MAA, which is issued within 67 days of receipt of the EMA’s opinion. Accelerated assessment might be granted by the CHMP in exceptional cases, when a medicinal product is expected to be of major public health interest, particularly from the point of view of therapeutic innovation. If the CHMP accepts such request, the time limit of 210 days will be reduced to 150

52

Table of Contents

days, excluding clock stops, but it is possible that the CHMP may revert to the standard time limit for the centralized procedure if it determines that the application is no longer appropriate to conduct an accelerated assessment.

Unlike the centralized authorization procedure, the decentralized MA procedure requires a separate application to, and leads to separate approval by, the competent authorities of each EU Member State in which the product is to be marketed. This application is identical to the application that would be submitted to the EMA for authorization through the centralized procedure. The reference EU Member State prepares a draft assessment and drafts of the related materials within 120 days after receipt of a valid application. The resulting assessment report is submitted to the concerned EU Member States who, within 90 days of receipt, must decide whether to approve the assessment report and related materials. If a concerned EU Member State cannot approve the assessment report and related materials due to concerns relating to a potential serious risk to public health, disputed elements may be referred to the Heads of Medicines Agencies’ Coordination Group for Mutual Recognition and Decentralised Procedures – Human, or CMDh, for review. The subsequent decision of the European Commission is binding on all EU Member States.

The mutual recognition procedure allows companies that have a medicinal product already authorized in one EU Member State to apply for this authorization to be recognized by the competent authorities in other EU Member States. Like the decentralized procedure, the mutual recognition procedure is based on the acceptance by the competent authorities of the EU Member States of the MA of a medicinal product by the competent authorities of other EU Member States. The holder of a national MA may submit an application to the competent authority of an EU Member State requesting that this authority recognize the MA delivered by the competent authority of another EU Member State.

Under the above-described procedures, before granting the MA, the European Commission or the competent authorities of the EU Member States make an assessment of the risk-benefit balance of the product on the basis of scientific criteria concerning its quality, safety and efficacy.

An MA has, in principle, an initial validity of five years. The MA may be renewed after five years on the basis of a re-evaluation of the risk-benefit balance by the EMA or by the competent authority of the EU Member State in which the original MA was granted. To support the application, the MA holder must provide the EMA or the competent authority with a consolidated version of the Common Technical Document providing up-to-date data concerning the quality, safety and efficacy of the product, including all variations introduced since the MA was granted, at least nine months before the MA ceases to be valid. The European Commission or the competent authorities of the EU Member States may decide on justified grounds relating to pharmacovigilance, to proceed with one further five year renewal period for the MA. Once subsequently definitively renewed, the MA shall be valid for an unlimited period. Any authorization which is not followed by the actual placing of the medicinal product on the EU market (for a centralized MA) or on the market of the authorizing EU Member State within three years after authorization ceases to be valid (the so-called sunset clause).

Innovative products that target an unmet medical need and are expected to be of major public health interest may be eligible for a number of expedited development and review programs, such as the Priority Medicines, or PRIME, scheme, which provides incentives similar to the breakthrough therapy designation in the U.S. PRIME is a voluntary scheme aimed at enhancing the EMA’s support for the development of medicinal products that target unmet medical needs. Eligible products must target conditions for which there is an unmet medical need (there is no satisfactory method of diagnosis, prevention or treatment in the EU or, if there is, the new medicinal product will bring a major therapeutic advantage) and they must demonstrate the potential to address the unmet medical need by introducing new methods of therapy or improving existing ones. Benefits accrue to sponsors of product candidates with PRIME designation, including but not limited to, early and proactive regulatory dialogue with the EMA, frequent discussions on clinical trial designs and other development program elements, and potentially accelerated MAA assessment once a dossier has been submitted.

In the EU, a “conditional” MA may be granted in cases where all the required safety and efficacy data are not yet available. The European Commission may grant a conditional MA for a medicinal product if it is demonstrated that all of the following criteria are met: (i) the benefit-risk balance of the medicinal product is positive; (ii) it is likely that the applicant will be able to provide comprehensive data post-authorization; (iii) the medicinal product fulfils an unmet medical need; and (iv) the benefit of the immediate availability to patients of the medicinal product is greater than the

53

Table of Contents

risk inherent in the fact that additional data are still required. The conditional MA is subject to conditions to be fulfilled for generating the missing data or ensuring increased safety measures. It is valid for one year and must be renewed annually until all related conditions have been fulfilled. Once any pending studies are provided, the conditional MA can be converted into a traditional MA. However, if the conditions are not fulfilled within the timeframe set by the EMA and approved by the European Commission, the MA will cease to be renewed.

An MA may also be granted “under exceptional circumstances” where the applicant can show that it is unable to provide comprehensive data on efficacy and safety under normal conditions of use even after the product has been authorized and subject to specific procedures being introduced. These circumstances may arise in particular when the intended indications are very rare and, in the state of scientific knowledge at that time, it is not possible to provide comprehensive information, or when generating data may be contrary to generally accepted ethical principles. Like a conditional MA, an MA granted in exceptional circumstances is reserved to medicinal products intended to be authorized for treatment of rare diseases or unmet medical needs for which the applicant does not hold a complete data set that is required for the grant of a standard MA. However, unlike the conditional MA, an applicant for authorization in exceptional circumstances is not subsequently required to provide the missing data. Although the MA “under exceptional circumstances” is granted definitively, the risk-benefit balance of the medicinal product is reviewed annually, and the MA will be withdrawn if the risk-benefit ratio is no longer favorable.

Advanced Therapy Medicinal Products in the European Union

Advanced Therapy Medicinal Products (“ATMPs”), include gene therapy products as well as somatic cell therapy products and tissue engineered products. The grant of marketing authorization in the EU for products containing viable human tissues or cells such as gene therapy medicinal products is governed by Regulation (EC) No. 1394/2007 on ATMPs, read in combination with Directive (EC) No. 2001/83 of the European Parliament and of the Council, commonly known as the Community code on medicinal products. Regulation (EC) No. 1394/2007 establishes specific rules concerning the authorization, supervision and pharmacovigilance of gene therapy medicinal products, somatic cell therapy medicinal products and tissue engineered products. Manufacturers of advanced therapy medicinal products must demonstrate the quality, safety and efficacy of their products to the EMA which is required to provide an opinion regarding the application for marketing authorization. The European Commission grants or refuses marketing authorization in light of the opinion delivered by the EMA.

Cell-based products must also comply with Directive (EC) No. 2004/23 of the European Parliament and of the Council of March 31, 2004 on setting standards of quality and safety for the donation, procurement, testing, processing, preservation, storage and distribution of human tissues and cells, or the Tissues and Cells Directive, as well as its technical implementing directives. This Directive describes the conditions and quality requirements which must be applied when sourcing the cells intended for manufacturing of the cell-based medicinal product. The EU Member States have transposed the Tissues and Cells Directive into their national laws. However, various interpretations of the Tissue and Cells Directive have occurred and are reflected in individual EU Member States national implementing legislation which have led to diverging approaches.

European Union Pediatric Development

In the EU, Regulation (EC) No 1901/2006 provides that all MAAs for new medicinal products have to include the results of trials conducted in the pediatric population, in compliance with a pediatric investigation plan, or PIP, agreed with the EMA’s Pediatric Committee (“PDCO”). The PIP sets out the timing and measures proposed to generate data to support a pediatric indication of the medicinal product for which MA is being sought. The PDCO can grant a deferral of the obligation to implement some or all of the measures provided in the PIP until there are sufficient data to demonstrate the efficacy and safety of the product in adults. Further, the obligation to provide pediatric clinical trial data can be waived by the PDCO when these data are not needed or appropriate because the product is likely to be ineffective or unsafe in children, the disease or condition for which the product is intended occurs only in adult populations, or when the product does not represent a significant therapeutic benefit over existing treatments for pediatric patients. Once the MA is obtained in all EU Member States and study results are included in the product information, even when negative, the product is eligible for a six-month extension to the Supplementary Protection Certificate (“SPC”) if any is

54

Table of Contents

in effect at the time of authorization or, in the case of orphan medicinal products, a two-year extension of orphan market exclusivity.

European Union Data and Market Exclusivities

In the EU, innovative medicinal products qualify for eight years of data exclusivity upon grant of an MA and an additional two years of market exclusivity. The data exclusivity, if granted, prevents generic or biosimilar applicants from referencing the innovator’s preclinical and clinical trial data contained in the dossier of the reference product when applying for a generic or biosimilar MA in the EU, during a period of eight years from the date on which the reference product was first authorized in the EU. During the additional two-year period of market exclusivity, a generic or biosimilar MAA can be submitted, and the innovator’s data may be referenced, but no generic or biosimilar product can be placed on the EU market until the expiration of the market exclusivity. The overall ten-year period will be extended to a maximum of eleven years if, during the first eight years of those ten years, the marketing authorization holder obtains an authorization for one or more new therapeutic indications which, during the scientific evaluation prior to their authorization, are determined to bring a significant clinical benefit in comparison with currently approved therapies. There is no guarantee that a product will be considered by the EU’s regulatory authorities to be an innovative medicinal product, and products may not qualify for data exclusivity.

In the EU, there is a special regime for biosimilars, or biological medicinal products that are similar to a reference medicinal product but that do not meet the definition of a generic medicinal product. For such products, the results of appropriate preclinical or clinical trials must be provided in support of an application for MA. Guidelines from the EMA detail the type of quantity of supplementary data to be provided for different types of biological product.

European Union Orphan Designation and Exclusivity

In the EU, medicinal products can be designated as an orphan medicinal product by the European Commission, following the opinion of the EMA’s Committee for Orphan Medicinal Products if the sponsor of a product can establish that: (1) the product is intended for the diagnosis, prevention or treatment of life-threatening or chronically debilitating conditions; (2) either (i) such condition affects no more than five in 10,000 persons in the EU when the application is made, or (ii) it is unlikely that the marketing of the product, without the benefits derived from orphan status, would generate sufficient return in the EU to justify the necessary investment in its development; and (3) there exists no satisfactory method of diagnosis, prevention or treatment of such condition authorized for marketing in the EU, or, if a method exists, the product would be a significant benefit to those affected by that condition.

An application for the designation of a medicinal product as an orphan medicinal product must be submitted at any stage of development of the medicinal product but before filing of an MAA. An MA for an orphan medicinal product may only include indications designated as orphan. For non-orphan indications treated with the same active pharmaceutical ingredient, a separate marketing authorization has to be sought.

In the EU, orphan designation entitles a party to financial incentives such as reduction of fees or fee waivers, protocol assistance, and access to the centralized marketing authorization procedure. Upon grant of a marketing authorization, orphan medicinal products are entitled to a ten-year period of market exclusivity for the approved therapeutic indication, which means that the EMA cannot accept another marketing authorization application or accept an application to extend for a “similar product” and the European Commission cannot grant a marketing authorization for the same indication for a period of ten years. A “similar medicinal product” is defined as a medicinal product containing a similar active substance or substances as contained in an authorized orphan medicinal product, and which is intended for the same therapeutic indication. The period of market exclusivity is extended by two years for orphan medicinal products that have also complied with an agreed PIP. No extension to any supplementary protection certificate can be granted on the basis of pediatric studies for orphan indications. Orphan medicinal product designation does not convey any advantage in, or shorten the duration of, the regulatory review and approval process. The market exclusivity period may be reduced to six years if the orphan designation criteria are no longer met, including where it is shown that the product is sufficiently profitable not to justify maintenance of market exclusivity or where the prevalence of the condition has increased above the threshold. Additionally, an MA may be granted to a similar medicinal product with the same orphan indication during the 10 year period if (i) it is established that a similar medicinal product is safer, more

55

Table of Contents

effective or otherwise clinically superior to the original orphan medicinal product; (ii) the marketing authorization holder of the authorized orphan product consents to a second original orphan medicinal product application; or (iii) the marketing authorization holder of the authorized orphan product cannot supply enough orphan medicinal product. A company may also voluntarily remove a product from the register of orphan products. Orphan designation does not convey any advantage in, or shorten the duration of, the regulatory review and approval process.

Manufacturing Regulation in the EU

In addition to an MA, various other requirements apply to the manufacturing and placing on the EU market of medicinal products. The manufacturing of medicinal products in the EU requires a manufacturing authorization and import of medicinal products into the EU requires a manufacturing authorization allowing for import. The manufacturing authorization holder must comply with various requirements set out in the applicable EU laws, regulations and guidance, including EU cGMP standards. Similarly, the distribution of medicinal products within the EU is subject to compliance with the applicable EU laws, regulations and guidelines, including the requirement to hold appropriate authorizations for distribution granted by the competent authorities of EU Member States. Marketing authorization holders and/or manufacturing and import authorization, or MA holders and/or distribution authorization holders may be subject to civil, criminal or administrative sanctions, including suspension of manufacturing authorization, in case of non-compliance with the EU or EU Member States’ requirements applicable to the manufacturing of medicinal products.

If an MA for a medicinal product in the EU is obtained, the holder of the MA is required to comply with a range of requirements applicable to the manufacturing, marketing, promotion and sale of medicinal products. These include:

56

Table of Contents

The aforementioned EU rules are generally applicable in the European Economic Area (EEA) which consists of the EU Member States, plus Norway, Liechtenstein and Iceland.

European Data Collection

The collection and use of personal health data in the EEA is governed by the EU GDPR. The EU GDPR applies to any company established in the EEA and to companies established outside the EEA that process personal data in connection with the offering of goods or services to data subjects in the EEA or the monitoring of the behavior of data subjects in the EEA. The EU GDPR enhances data protection obligations for data controllers of personal data, including stringent requirements relating to the consent of data subjects, expanded disclosures about how personal data is used, requirements to conduct privacy impact assessments for “high risk” processing, limitations on retention of personal data, mandatory data breach notification and “privacy by design” requirements, and creates direct obligations on service providers acting as data processors.

In addition, further to the United Kingdom’s exit from the European Union on January 31, 2020, the EU GDPR ceased to apply in the United Kingdom at the end of the transition period on December 31, 2020. However, as of January 1, 2021, the United Kingdom’s European Union (Withdrawal) Act 2018 incorporated the EU GDPR (as it existed on December 31, 2020 but subject to certain UK specific amendments) into UK law, referred to as the UK GDPR. The UK GDPR and the UK Data Protection Act 2018 set out the United Kingdom’s data protection regime, which is independent from but substantially aligned to the European Union’s data protection regime. Although the EU GDPR and the UK GDPR currently impose substantially similar obligations, it is possible that over time the UK GDPR could become less aligned with the EU GDPR. The UK government has announced plans to reform the data protection legal framework in the UK in the Data Protection and Digital Information Bill. The potential misalignment between future UK laws and regulations and EU laws and regulations could add legal risk, uncertainty, complexity and cost to our handling of EU/UK personal information and our privacy and data security compliance programs and could require us to implement different compliance measures for the UK and the EU. Non-compliance with the UK GDPR may result in monetary penalties of up to £17.5 million or 4% of worldwide revenue, whichever is higher. Although the UK is regarded as a third country under the EU GDPR, the EC has issued a decision recognizing the UK as providing adequate protection under the EU GDPR and, therefore, transfers of personal data originating in the EU to the UK remain unrestricted. Like the EU GDPR, the UK GDPR restricts personal data transfers outside the United Kingdom to countries not regarded by the United Kingdom as providing adequate protection. The UK government has confirmed that personal data transfers from the United Kingdom to the EEA remain free flowing. To enable the transfer of personal data outside of the EEA or the UK, adequate safeguards must be implemented in compliance with EU and UK data protection laws. There are currently various mechanisms that may be used to transfer personal data from the EEA and UK to the United States in compliance with law, such as the EU’s Standard Contractual Clauses, the UK’s International Data Transfer Agreement / Addendum, and the EU-U.S. Data Privacy Framework and the UK Extension thereto (which allows for transfers for relevant U.S.-based organizations who self-certify compliance and participate in the Framework). However, these mechanisms are subject to legal challenges, and there is no assurance that we can satisfy or rely on these measures to lawfully transfer personal data to the United States.

Failure to comply with the requirements of the EU GDPR or UK GDPR and the related national data protection laws of the EEA Member States may result in fines up to €20 million or 4% of a company’s global annual revenues for the preceding financial year, whichever is higher. Moreover, the EU GDPR and UK GDPR grant data subjects the right to claim material and non-material damages resulting from infringement of the EU GDPR or UK GDPR. Given the breadth and depth of changes in data protection obligations, maintaining compliance with the EU GDPR and UK GDPR, will require significant time, resources and expense, and we may be required to put in place additional mechanisms ensuring compliance with the new data protection rules. This may be onerous and adversely affect our business, financial condition, results of operations and prospects.

57

Table of Contents

Brexit and the Regulatory Framework in the United Kingdom

The United Kingdom’s, or UK, withdrawal from the EU on January 31, 2020, commonly referred to as Brexit, has changed the regulatory relationship between the UK and the EU. The Medicines and Healthcare products Regulatory Agency, or MHRA, is now the UK’s standalone regulator for medicinal products and medical devices. Great Britain (England, Scotland and Wales) is now a third country to the EU. Northern Ireland will, with regard to EU regulations, continue to follow the EU regulatory rules for now.

The UK regulatory framework in relation to clinical trials is governed by the Medicines for Human Use (Clinical Trials) Regulations 2004, as amended, which is derived from the CTD, as implemented into UK national law through secondary legislation. On January 17, 2022, the MHRA launched an eight-week consultation on reframing the UK legislation for clinical trials, and which aimed to streamline clinical trials approvals, enable innovation, enhance clinical trials transparency, enable greater risk proportionality, and promote patient and public involvement in clinical trials. The UK Government published its response to the consultation on March 21, 2023 confirming that it would bring forward changes to the legislation. These resulting legislative amendments will determine how closely the UK regulations will align with the CTR. In October 2023, the MHRA announced a new Notification Scheme for clinical trials which enables a more streamlined and risk-proportionate approach to initial clinical trial applications for Phase 4 and low-risk Phase 3 clinical trial applications.

Marketing authorizations in the UK are governed by the Human Medicines Regulations (SI 2012/1916), as amended. Since January 1, 2021, an applicant for the EU centralized procedure marketing authorization can no longer be established in the UK. As a result, since this date, companies established in the UK cannot use the EU centralized procedure and instead must follow one of the UK national authorization procedures or one of the remaining post-Brexit international cooperation procedures to obtain a marketing authorization to market products in the UK. All existing EU marketing authorizations for centrally authorized products were automatically converted or grandfathered into UK marketing authorization, effective in Great Britain only, free of charge on January 1, 2021, unless the marketing authorization holder opted-out of this possibility. Northern Ireland currently remains within the scope of EU authorizations in relation to centrally authorized medicinal products. Accordingly, until the Windsor Framework is implemented in Northern Ireland on January 1, 2025, products falling within the scope of the EU centralized procedure can only be authorized through UK national authorization procedures in Great Britain.

The MHRA has also introduced changes to national marketing authorization procedures. This includes introduction of procedures to prioritize access to new medicines that will benefit patients, including a 150-day assessment route, a rolling review procedure and the International Recognition Procedure. Since January 1, 2024, the MHRA may rely on the International Recognition Procedure, or IRP, when reviewing certain types of marketing authorization applications. This procedure is available for applicants for marketing authorization who have already received an authorization for the same product from a reference regulator. These include the FDA, the EMA, and national competent authorities of individual EEA countries. A positive opinion from the EMA and CHMP, or a positive end of procedure outcome from the mutual recognition or decentralized procedures are considered to be authorizations for the purposes of the IRP.

There is no pre-marketing authorization orphan designation for medicinal products in the UK. Instead, the MHRA reviews applications for orphan designation in parallel to the corresponding marketing authorization application. The criteria are essentially the same as those in the EU, but have been tailored for the market. This includes the criterion that prevalence of the condition in Great Britain, rather than the EU, must not be more than five in 10,000. Upon the grant of a marketing authorization with orphan status, the medicinal product will benefit from up to 10 years of market exclusivity from similar products in the approved orphan indication. The start of this market exclusivity period will be set from the date of first approval of the product in Great Britain.

Rest of the World Regulation

For other countries outside of the EU and the United States, such as countries in Eastern Europe, Latin America or Asia, the requirements governing the conduct of clinical trials, product licensing, pricing and reimbursement vary from country to country. Additionally, the clinical trials must be conducted in accordance with GCP requirements and

58

Table of Contents

the applicable regulatory requirements and the ethical principles that have their origin in the Declaration of Helsinki. In addition, many jurisdictions outside of Europe are also considering and/or enacting comprehensive data protection legislation. These laws impose stringent requirements applicable to our collection, use and processing of personal data including identifiable health information.

If we fail to comply with applicable foreign regulatory requirements, we may be subject to, among other things, fines, suspension or withdrawal of regulatory approvals, product recalls, seizure of products, operating restrictions and criminal prosecution.

Coverage and Reimbursement

Sales of our products, when and if approved, will depend, in part, on the extent to which our products will be covered by third-party payors, such as government health programs, commercial insurance and managed healthcare organizations. In the United States, the principal decisions about reimbursement for new medicines are typically made by CMS, an agency within the HHS. CMS decides whether and to what extent a new medicine will be covered and reimbursed under Medicare and private payors tend to follow CMS to a substantial degree. However, no uniform policy of coverage and reimbursement for drug or biological products exists in the United States. Accordingly, decisions regarding the extent of coverage and amount of reimbursement to be provided for any of our products will be made on a payor-by-payor basis. As a result, coverage determination is often a time consuming and costly process that will require us to provide scientific and clinical support for the use of our products to each payor separately, with no assurance that coverage and adequate reimbursement will be obtained. Factors payors consider in determining reimbursement are based on whether the product is:

The U.S. government, state legislatures and foreign governments have shown significant interest in implementing cost containment programs to limit the growth of government paid health care costs, including price controls, restrictions on reimbursement and requirements for substitution of biosimilars for branded prescription drugs. For example, the ACA contains provisions that may reduce the profitability of drug products through increased rebates for drugs reimbursed by Medicaid programs, extension of Medicaid rebates to Medicaid managed care plans, mandatory discounts for certain Medicare Part D beneficiaries and annual fees based on pharmaceutical companies’ share of sales to federal healthcare programs. Adoption of general controls and measures, coupled with the tightening of restrictive policies in jurisdictions with existing controls and measures, could limit payments for pharmaceutical drugs.

The Medicaid Drug Rebate Program requires pharmaceutical manufacturers to enter into and have in effect a national rebate agreement with the Secretary of the HHS as a condition for states to receive federal matching funds for the manufacturer’s outpatient drugs furnished to Medicaid patients. The ACA made several changes to the Medicaid Drug Rebate Program, including increasing pharmaceutical manufacturers’ rebate liability by raising the minimum basic Medicaid rebate on most branded prescription drugs from 15.1% of average manufacturer price (AMP), to 23.1% of AMP and adding a new rebate calculation for “line extensions” (i.e., new formulations, such as extended release formulations) of solid oral dosage forms of branded products, as well as potentially impacting their rebate liability by modifying the statutory definition of AMP. The ACA also expanded the universe of Medicaid utilization subject to drug rebates by requiring pharmaceutical manufacturers to pay rebates on Medicaid managed care utilization and by enlarging the population potentially eligible for Medicaid drug benefits.

59

Table of Contents

The Medicare Prescription Drug, Improvement, and Modernization Act of 2003 (MMA) established the Medicare Part D program to provide a voluntary prescription drug benefit to Medicare beneficiaries. Under Part D, Medicare beneficiaries may enroll in prescription drug plans offered by private entities that provide coverage of outpatient prescription drugs. Unlike Medicare Part A and B, Part D coverage is not standardized. While all Medicare drug plans must give at least a standard level of coverage set by Medicare, Part D prescription drug plan sponsors are not required to pay for all covered Part D drugs, and each drug plan can develop its own drug formulary that identifies which drugs it will cover and at what tier or level. However, Part D prescription drug formularies must include drugs within each therapeutic category and class of covered Part D drugs, though not necessarily all the drugs in each category or class. Any formulary used by a Part D prescription drug plan must be developed and reviewed by a pharmacy and therapeutic committee. Government payment for some of the costs of prescription drugs may increase demand for products for which we receive marketing approval. However, any negotiated prices for our products covered by a Part D prescription drug plan likely will be lower than the prices we might otherwise obtain. Moreover, while the MMA applies only to drug benefits for Medicare beneficiaries, private payors often follow Medicare coverage policy and payment limitations in setting their own payment rates. Any reduction in payment that results from the MMA may result in a similar reduction in payments from non-governmental payors.

For a drug product to receive federal reimbursement under the Medicaid or Medicare Part B programs or to be sold directly to U.S. government agencies, the manufacturer must extend discounts to entities eligible to participate in the 340B drug pricing program. The required 340B discount on a given product is calculated based on the AMP and Medicaid rebate amounts reported by the manufacturer. As of 2010, the ACA expanded the types of entities eligible to receive discounted 340B pricing, although, under the current state of the law, with the exception of children’s hospitals, these newly eligible entities will not be eligible to receive discounted 340B pricing on orphan drugs. In addition, as 340B drug pricing is determined based on AMP and Medicaid rebate data, the revisions to the Medicaid rebate formula and AMP definition described above could cause the required 340B discount to increase.

As noted above, the marketability of any products for which we receive regulatory approval for commercial sale may suffer if the government and third-party payors fail to provide coverage and reimbursement. Obtaining coverage and reimbursement for newly approved drugs and biologics is a time consuming and costly process, and coverage may be more limited than the purposes for which a drug is approved by the FDA or comparable foreign regulatory authorities. Assuming coverage is obtained for a given product by a third-party payor, the resulting reimbursement payment rates may not be adequate or may require copayments that patients find unacceptably high. Additionally, coverage policies and third-party reimbursement rates may change at any time. Patients who are prescribed medications for the treatment of their conditions, and their prescribing physicians, generally rely on third-party payors to reimburse all or part of the costs associated with their prescription drugs. Patients are unlikely to use products unless coverage is provided and reimbursement is adequate to cover all or a significant portion of the cost of prescribed products.

Additionally, we, or our collaborators may develop companion diagnostic tests for use with our product candidates. We, or our collaborators, will be required to obtain coverage and reimbursement for these tests separate and apart from the coverage and reimbursement we may seek for our product candidates. While we have not yet developed any companion diagnostic tests for our product candidates, if we do, there is significant uncertainty regarding our ability to obtain coverage and adequate reimbursement for the same reasons applicable to our product candidates.

In addition, in most foreign countries, the proposed pricing for a drug must be approved before it may be lawfully marketed. The requirements governing drug pricing and reimbursement vary widely from country to country. For example, the EU provides options for its Member States to restrict the range of medicinal products for which their national health insurance systems provide reimbursement and to control the prices of medicinal products for human use. A Member State may approve a specific price for the medicinal product or it may instead adopt a system of direct or indirect controls on the profitability of the company placing the medicinal product on the market. Other EU Member States allow companies to fix their own prices for products but monitor and control prescription volumes and issue guidance to physicians to limit prescriptions. In addition, some EU Member States may require the completion of additional studies that compare the cost-effectiveness of a particular medicinal product candidate to currently available therapies. This Health Technology Assessment, or HTA, process is the procedure according to which the assessment of the public health impact, therapeutic impact and the economic and societal impact of use of a given medicinal product in

60

Table of Contents

the national healthcare systems of the individual country is conducted. The outcome of HTA regarding specific medicinal products will often influence the pricing and reimbursement status granted to these medicinal products by the competent authorities of individual EU Member States. In December 2021, Regulation No 2021/2282 on Health Technology Assessment, or HTA Regulation, was adopted. The HTA Regulation is intended to boost cooperation among EU Member States in assessing health technologies, including new medicinal products, and providing the basis for cooperation at EU level for joint clinical assessments in these areas. When it enters into application in 2025, the HTA Regulation will be intended to harmonize the clinical benefit assessment of HTA across the European Union. In light of the fact that the United Kingdom has left the EU, Regulation No 2021/2282 on HTA will not apply in the United Kingdom. However, the UK Medicines and Healthcare products Regulation Agency (“MHRA”) is working with UK HTA bodies and other national organizations, such as the Scottish Medicines Consortium (“SMC”), the National Institute for Health and Care Excellence (“NICE”), and the All-Wales Medicines Strategy Group, to introduce new pathways supporting innovative approaches to the safe, timely and efficient development of medicinal products.

There can be no assurance that any country that has price controls or reimbursement limitations for pharmaceutical products will allow favorable reimbursement and pricing arrangements for any of our products. Historically, products launched in the EU do not follow price structures of the United States and generally prices tend to be significantly lower.

Human Capital Resources

As of February 29, 2024, we had 151 full-time employees and 28 part-time employees. Of our 179 full and part-time employees, 42, or 23.5%, have Ph.D. or M.D. degrees and 140, or 78.2%, are engaged in research and development activities. Pursuant to Austrian law, all of our Austrian employees are covered by a collective bargaining agreement. We consider our relationship with our employees to be good.

Our human capital resources objectives include, as applicable, identifying, recruiting, retaining, incentivizing and integrating our existing and new employees, advisors and consultants. To further drive attraction and retention of our high-quality, experienced, and diverse workforce, we invest in the physical, emotional, and financial well-being of our employees. The principal purposes of our equity incentive plans are to attract, retain and reward personnel through the granting of stock-based compensation awards in order to increase stockholder value and the success of our company by motivating such individuals to perform to the best of their abilities and achieve our objectives.

Corporate History

We were originally incorporated as Hookipa Biotech AG under the laws of Austria in 2011. In February 2017, we reorganized to become a corporation under the laws of the State of Delaware as Hookipa Biotech, Inc., which was a wholly-owned subsidiary of Hookipa Biotech AG. In June 2018, Hookipa Biotech, Inc. changed its name to HOOKIPA Pharma Inc. and acquired all of the shares of Hookipa Biotech AG, now Hookipa Biotech GmbH.

Facilities

Our principal executive offices are located in New York, New York, pursuant to a lease that expires in August 2026. Our European research and preclinical development operations are located in Vienna, Austria, where we lease and occupy approximately 30,681 square feet of office and laboratory space. Our first facility is leased pursuant to two operating leases, comprised of (i) a lease of unlimited duration for approximately 15,239 square feet of office and laboratory space and (ii) a lease set to expire in September 2028 and with no option to extend for approximately 2,367 square feet of storage space. In 2019, we entered into a lease for a second facility located in Vienna, Austria that is set to expire in February 2029, where we occupy approximately 15,440 square feet of office and laboratory space. In May 2021 we signed an agreement to purchase a parcel of land in the north of Vienna and have received building permission to build a GMP manufacturing plant. We have completed the detailed engineering phase, but decided to discontinue the construction project of a GMP manufacturing facility, which was written-off in the year ended December 31, 2023. Furthermore, we decided to divest all assets associated with this project, including, but not limited to the parcel of land. We believe that our current facilities are adequate to meet our ongoing needs, and that, if we require additional space, we will be able to obtain additional facilities on commercially reasonable terms.

61

Table of Contents

Legal Proceedings

We were recently a party to a patent proceeding opposing European Patent No. 3218504 (the “EP ’504 Patent”), which was granted to the University of Geneva in July 2020 and is exclusively licensed to us. In a decision that has become final, the Opposition Division of the European Patent Office (“EPO”) dismissed the opposition in an oral proceeding on May 9, 2023, and maintained the patent as granted. We are not currently a party to any material legal proceedings. From time to time, we may become involved in other litigation or legal proceedings relating to claims arising from the ordinary course of business.

​

Available Information

Our Annual Reports on Form 10-K, Quarterly Reports on Form 10-Q, Current Reports on Form 8-K, proxy statements, and other information, including amendments and exhibits to such reports, filed or furnished pursuant to Section 13(a) or 15(d) of the Securities Exchange Act of 1934, are available free of charge on our website located at www.hookipapharma.com, as soon as reasonably practicable after they are filed with or furnished to the SEC. These reports are also available at the SEC’s Internet website at www.sec.gov.

A copy of our Corporate Governance Guidelines, Code of Conduct and the charters of the Audit Committee, Compensation Committee and Nominating and Corporate Governance Committee are posted on our website, www.hookipapharma.com, under the heading “Corporate Governance.”

​

Item 1A.  Risk Factors

Investing in our common stock involves a high degree of risk. You should carefully consider the risks described below, as well as the other information in this Annual Report on Form 10-K, including our financial statements and the related notes and “Management’s Discussion and Analysis of Financial Condition and Results of Operations,” before deciding whether to invest in our common stock. The occurrence of any of the events or developments described below could harm our business, financial condition, results of operations and growth prospects. In such an event, the market price of our common stock could decline and you may lose all or part of your investment. Additional risks and uncertainties not presently known to us or that we currently deem immaterial also may impair our business operations.

Risks Related to Our Financial Position and Capital Needs

We are a clinical-stage biopharmaceutical company with no approved products and a limited operating history. We have incurred significant losses since inception. We expect to incur losses for at least the next several years and may never achieve or maintain profitability.

We are a clinical stage biopharmaceutical company with no approved products and a limited operating history. Investment in biopharmaceutical product development is highly speculative because it entails substantial upfront capital expenditures and significant risk that any potential product candidate will fail to demonstrate adequate efficacy or an acceptable safety profile, gain regulatory approval and become commercially viable. We have no products approved for commercial sale and have not generated any revenue from product sales. To date, we have devoted substantially all of our resources to organizing and staffing our company, business planning, raising capital, undertaking preclinical studies and clinical trials of our product candidates, securing related intellectual property rights and conducting discovery, research and development activities for our programs. As a result, we are not profitable and have incurred losses in each period since our inception in 2011. For the years ended December 31, 2022 and 2023, we reported a net loss of $64.9 million and $81.6 million, respectively. As of December 31, 2023, we had an accumulated deficit of $369.3 million. We expect to continue to incur significant losses for the foreseeable future. We anticipate that our expenses will increase substantially if, and as, we:

62

Table of Contents

Even if we succeed in commercializing one or more of our product candidates, we will continue to incur substantial research and development and other expenditures to develop and market additional product candidates and we may never generate revenue that is significant or large enough to achieve profitability. We may also encounter unforeseen expenses, difficulties, complications, delays and other unknown factors that may adversely affect our business. The size of our future net losses will depend, in part, on the rate of future growth of our expenses and our ability to generate revenue. Our prior losses and expected future losses have had and will continue to have an adverse effect on our stockholders’ equity and working capital.

If we do achieve profitability, we may not be able to sustain or increase profitability on a quarterly or annual basis. Accordingly, our failure to become and remain profitable would decrease the value of our company and could impair our ability to raise capital, maintain our research and development efforts, expand our business or continue our operations. A decline in the value of our company also could cause you to lose all or part of your investment.

We will require substantial additional financing and a failure to obtain this necessary capital when needed on acceptable terms, or at all, could force us to delay, limit, reduce or terminate our product development programs, commercialization efforts or other operations.

Since our inception, we have invested a significant portion of our efforts and financial resources in research and development activities for our non-replicating and replicating technologies and our product candidates derived from these technologies. Preclinical studies and clinical trials and additional research and development activities will require substantial funds to complete. We believe that we will continue to expend substantial resources for the foreseeable future in connection with the development of our current product candidates and programs, any future product candidates we may choose to pursue, when we begin to develop our own manufacturing capabilities and other corporate uses. These expenditures will include costs associated with conducting preclinical studies and clinical trials, obtaining regulatory approvals, and manufacturing and supply, as well as marketing and selling any products approved for sale. Our expenses could increase beyond our current expectations if other unanticipated costs arise or if the FDA, the EMA, or other comparable foreign regulatory authorities requires us to perform clinical trials and other studies in addition to those that we currently anticipate. Because the outcome of any preclinical study or clinical trial is highly uncertain, we cannot reasonably estimate the actual amounts necessary to successfully complete the development and commercialization of our current or future product candidates. If we are unable to raise capital when needed or on acceptable terms, we would be forced to delay, reduce or terminate our research and development programs or future commercialization efforts.

As of December 31, 2023, we had $117.5 million in cash, cash equivalents and restricted cash. Based on our research and development plans, we expect that our existing cash and cash equivalents at December 31, 2023, together with the payment we expect to receive prior to the termination of the Roche Collaboration Agreement in April 2024, will

63

Table of Contents

enable us to fund our operating expenses and capital expenditure requirements for at least the next 12 months. This estimate is based on assumptions that may prove to be wrong, and we could use our available capital resources sooner than we expect. Changes may occur beyond our control that would cause us to consume our available capital before that time, including changes in and progress of our development activities and changes in regulation. Our future capital requirements depend on many factors, including:

Other than the Stock Purchase Agreement and our collaboration agreements with Gilead, we do not have any committed external source of funds or other support for our development efforts.

Raising additional capital may cause dilution to our stockholders, restrict our operations or require us to relinquish proprietary rights.

Until we can generate sufficient product and royalty revenue to finance our cash requirements, which we may never do, we expect to finance our future cash needs through a combination of public or private equity offerings, debt financings, collaborations, strategic alliances, licensing arrangements and other marketing or distribution arrangements and grant funding.

If we raise additional capital through public or private equity offerings, the terms of these securities may include liquidation or other preferences that adversely affect our stockholders’ rights. Further, to the extent that we raise additional capital through the sale of common stock or securities convertible or exchangeable into common stock, your

64

Table of Contents

ownership interest will be diluted. For example, in December 2023 we entered into an Amended and Restated Stock Purchase Agreement with Gilead pursuant to which we issued and sold 15,000,000 shares of unregistered common stock to Gilead for approximately $21.25 million, and we may require Gilead to purchase up to approximately $8.75 million of additional share of common stock. In addition, in May 2023 we completed a public offering in which we issued and sold 22,900,768 shares of common stock and 15,268 shares of Series A-2 convertible preferred stock, which are convertible into common stock on a 1,000 to one basis, pursuant to our shelf registration statement on Form S-3 (File No. 333-266104) for net proceeds of $46.3 million. If we raise additional capital through debt financing, we would be subject to fixed payment obligations and may be subject to covenants limiting or restricting our ability to take specific actions, such as incurring additional debt, making capital expenditures or declaring dividends. If we raise additional capital through marketing and distribution arrangements or other collaborations, strategic alliances or licensing arrangements with third parties, we may have to relinquish certain valuable rights to our product candidates, technologies, future revenue streams or research programs or grant licenses on terms that may not be favorable to us.

If we are unable to raise additional funds through equity or debt financings when needed, we may be required to delay, reduce or terminate our product development or future commercialization efforts or grant rights to third parties to develop and market product candidates that we would otherwise prefer to develop and market ourselves.

If we engage in future acquisitions or strategic partnerships, this may increase our capital requirements, dilute our stockholders if we issue equity securities, cause us to incur debt or assume contingent liabilities, and subject us to other risks.

We may evaluate various acquisitions and strategic partnerships, including acquiring complementary products, intellectual property rights, technologies, or businesses. Any potential acquisition or strategic partnership may entail numerous risks, including:

In addition, if we undertake acquisitions, we may incur large one-time expenses and acquire intangible assets that could result in significant future amortization expense.

65

Table of Contents

We have obtained funding from an agency of the Austrian government that contains certain covenants that may restrict our operations.

In the past, we have contracted numerous funding agreements with an agency of the Austrian government to partially finance our research and development programs, such as personnel costs, material costs, third-party services, travel expenses and research and development infrastructure use. These funding agreements include both below market rate loans and grants, which are subject to various criteria linked to certain terms and conditions as well as certain costs attributable to the respective funded research and development program. We have committed to reporting obligations and to obtain the approval for significant changes in the cost structure of the funded research and development programs. If we were to breach these contractual obligations, we may be held liable by the agency of the Austrian government for damages incurred by such agencies resulting from the breach of contract and we could be required to reimburse in full the funding granted by such agencies.

Further, pursuant to the general terms of each grant, the agency is entitled to re-evaluate the funding granted to us in case of a fundamental change in our ownership structure if such change no longer ensures that the purpose of the funding can be achieved. Any such re-evaluation could negatively impact the funding that we receive or have received from the agency or that we may receive in the future from other agencies of the Austrian government.

Risks Related to Our Business and Industry

If we are unable to advance our current or future product candidates into and through clinical trials, obtain marketing approval and ultimately commercialize any product candidates we develop, or experience significant delays in doing so, our business will be materially harmed.

All of our product candidates are in early stages of development, including our lead product candidate, HB-200, which is currently in a Phase 1/2 clinical trial, and as such will require extensive preclinical and clinical testing. We cannot predict with any certainty if or when we might submit an IND, or BLA, or comparable foreign applications, for regulatory approval for any of our product candidates or whether any such IND or BLA, or comparable foreign applications, will be accepted for review by the FDA or comparable foreign regulatory authority, or subsequently whether any such IND will go into effect or BLA will be approved upon review, or whether comparable foreign applications will fulfill the related milestones.

We may encounter unforeseen expenses, difficulties, complications, delays and other known or unknown factors in achieving our business objectives. For example, we recently announced a strategic refocus to prioritize clinical development of HB-200 for the treatment of HPV16+ head and neck cancers and Gilead-partnered programs in infectious disease and to pause development activities related to HB-300 and most other preclinical research activities. In connection with this strategic refocus, we implemented an approximately 30% reduction in our workforce and discontinued our GMP manufacturing facility project. In addition, in January 2024 Roche notified us of their decision to terminate the collaboration and licensing agreement for HB-700 in KRAS mutated cancers, despite acknowledging we had met all go-forward criteria under the agreement.

Our ability to generate product revenues, which we do not expect to occur for several years, if ever, will depend heavily on the successful development and eventual commercialization of the product candidates we develop, which may never occur. Before we are able to generate any revenues from product sales, our current product candidates, and any future product candidates we develop, will require additional preclinical and clinical development, management of clinical, preclinical and manufacturing activities, marketing approval in the United States and other markets, demonstrating effectiveness to pricing and reimbursement authorities, obtaining sufficient manufacturing supply for both clinical development and commercial production, building of a commercial organization, and substantial investment and significant marketing efforts. The success of our current and future product candidates will depend on several factors, including the following:

66

Table of Contents

We do not have complete control over many of these factors, including certain aspects of clinical development and the regulatory submission process, potential threats to our intellectual property rights and the manufacturing, marketing, distribution and sales efforts of any future collaborator. If we are not successful with respect to one or more of these factors in a timely manner or at all, we could experience significant delays or an inability to successfully commercialize the product candidates we develop, which would materially harm our business.

The regulatory approval processes of the FDA, the EMA and the European Commission and other comparable foreign regulatory authorities are lengthy, time-consuming and inherently unpredictable, and if we are ultimately unable to obtain regulatory approval for our product candidates, our business will be substantially harmed.

The time required to obtain approval from the FDA, the European Commission and other comparable foreign regulatory authorities is unpredictable, but typically takes many years following the commencement of clinical trials and depends upon numerous factors, including the substantial discretion of the regulatory authorities. In addition, approval

67

Table of Contents

policies, regulations, or the type and amount of clinical data necessary to gain approval may change during the course of a product candidate’s clinical development and may vary among jurisdictions. We have not obtained regulatory approval for any product candidate, and it is possible that none of our current or future product candidates will ever obtain regulatory approval.

Our current and future product candidates could fail to receive regulatory approval for many reasons, including the following:

This lengthy approval process as well as the unpredictability of clinical trial results may result in our failing to obtain regulatory approval to market any product candidate we develop, which would significantly harm our business, results of operations and prospects.

We have conducted, and intend to conduct, clinical trials of certain of our product candidates outside the United States. Although the FDA may accept data from clinical trials conducted outside the United States, acceptance of this data is subject to certain conditions imposed by the FDA, including compliance with all applicable U.S. laws and regulations. For example, the clinical trial must be well designed and conducted and performed by qualified investigators in accordance with GCP, including review and approval by an independent ethics committee and informed consent from subjects. The study population must also adequately represent the U.S. population, and the data must be applicable to the U.S. population and U.S. medical practice in ways that the FDA deems clinically meaningful. In general, the patient population for any clinical trials conducted outside of the United States must be representative of the population for whom we intend to label the product in the United States. There can be no assurance the FDA will accept data from trials

68

Table of Contents

conducted outside of the United States. Comparable risks apply abroad in relation to the data that was generated in the United States which we intend to leverage for purposes of obtaining regulatory authorizations abroad. There can be no assurance that foreign regulatory authorities will accept data from trials conducted outside of their territory.

The FDA, the EMA and the European Commission and other comparable foreign regulatory authorities have discretion in the approval process and determining when or whether regulatory approval will be obtained for any product candidate that we develop. Even if we believe the data collected from future clinical trials of our product candidates are promising, such data may not be sufficient to support approval by the FDA, the European Commission or any other comparable foreign regulatory authorities.

Even if we were to obtain approval, regulatory authorities may approve any of our product candidates for fewer or more limited indications than we request, may not approve the price we intend to charge for our products, may grant approval contingent on the performance of costly post-marketing clinical trials, or may approve a product candidate with a label that does not include the labeling claims necessary or desirable for the successful commercialization of that product candidate. Any of the foregoing scenarios could materially harm the commercial prospects for our product candidates.

Our clinical trials may fail to demonstrate adequately the safety and efficacy of any of our product candidates, which would prevent or delay regulatory approval and commercialization.

Before obtaining regulatory approvals for the commercial sale of our product candidates, including HB-200, HB-400, HB-500, HB-700 and any other future product candidates, we must demonstrate through lengthy, complex and expensive preclinical testing and clinical trials that our product candidates are both safe and effective for use in each target indication. Clinical testing is expensive and can take many years to complete, and its outcome is inherently uncertain. Failure can occur at any time during the clinical trial process, and, because our product candidates are in an early stage of development, there is a high risk of failure and we may never succeed in developing marketable products.

Clinical trials that we may conduct may not demonstrate the efficacy and safety necessary to obtain regulatory approval to market our product candidates. In some instances, there can be significant variability in safety or efficacy results between different clinical trials of the same product candidate due to numerous factors, including changes in trial procedures set forth in protocols, differences in the size and type of the patient populations, changes in and adherence to the clinical trial protocols and the rate of dropout among clinical trial participants. If the results of our ongoing or future clinical trials are inconclusive with respect to the efficacy of our product candidates, if we do not meet the clinical endpoints with statistical and clinically meaningful significance, or if there are safety concerns associated with our product candidates, we may be delayed in obtaining marketing approval, if at all.

Any inability to successfully complete preclinical and clinical development could result in additional costs to us or impair our ability to generate revenue from future drug sales and regulatory and commercialization milestones. Clinical trial delays could also shorten any periods during which we may have the exclusive right to commercialize our product candidates, if approved, or allow our competitors to bring comparable products to market before we do, which could impair our ability to successfully commercialize our product candidates and may harm our business, financial condition, results of operations and prospects.

Even if the trials are successfully completed, clinical data are often susceptible to varying interpretations and analyses, and we cannot guarantee that the FDA, the EMA and the European Commission, or other comparable foreign regulatory authorities will interpret the results as we do, and more trials could be required before we submit our product candidates for approval. We cannot guarantee that the FDA, the EMA and the European Commission or other comparable foreign regulatory authorities will view our product candidates as having efficacy even if positive results are observed in our clinical trials. To the extent that the results of the trials are not satisfactory to the FDA, the EMA and the European Commission or other comparable foreign regulatory authorities for support of a marketing application, approval of our product candidates may be significantly delayed, or we may be required to expend significant additional resources, which may not be available to us, to conduct additional trials in support of potential approval of our product candidates.

69

Table of Contents

Our preclinical programs may experience delays or our product candidates may never advance to clinical trials, which would adversely affect our ability to obtain regulatory approvals or commercialize these product candidates on a timely basis or at all, which would have an adverse effect on our business.

Certain of our product candidates and all of our next generation product candidates are still in the preclinical development stage, and the risk of failure of preclinical programs is high. Before we can commence clinical trials for a product candidate, we must complete extensive preclinical testing and studies to obtain regulatory clearance to initiate human clinical trials, including based on INDs in the United States and clinical trial applications in Europe. We cannot be certain of the timely completion or outcome of our preclinical testing and studies and cannot predict if the FDA, the competent authorities of EU Member States or other regulatory authorities will accept our proposed clinical programs or if the outcome of our preclinical testing and studies will ultimately support the further development of our product candidates. As a result, we cannot be sure that submission of INDs or similar applications will result in the FDA, the competent authorities of EU Member States or other comparable foreign regulatory authorities allowing clinical trials to begin.

We have in the past, and may in the future, encounter challenges in collecting, transporting and analyzing clinical blood samples, which could cause delays or prevent the approval of our drug candidates.

Interim, top line and preliminary data from our clinical trials that we announce or publish from time to time may change as more patient data become available and are subject to regulatory audit and verification procedures that could result in material changes in the final data.

From time to time, we may publish interim, top line or preliminary data from our clinical trials. We may decide to conduct an interim analysis of the data after a certain number or percentage of patients have been enrolled, or after only a part of the full follow-up period but before completion of the trial. Similarly, we may report top line or preliminary results of primary and key secondary endpoints before the final trial results are completed. Preliminary, top line and interim data from our clinical trials may change as more patient data or analyses become available. Preliminary, top line or interim data from our clinical trials are not necessarily predictive of final results and are subject to the risk that one or more of the clinical outcomes may materially change as patient enrollment continues, more patient data become available, and we issue our final clinical trial report. These data also remain subject to verification procedures that may result in the final data being materially different from the preliminary data we previously published. As a result, preliminary, interim and top line data should be viewed with caution until the final data are available. Material adverse changes in the final data compared to the interim data could significantly harm our business prospects.

Further, others, including regulatory agencies, may not accept or agree with our interim, topline or preliminary analyses or may interpret or weigh the importance of data differently, which could impact the value of the particular program, the approvability or commercialization of the particular product candidate and our company in general. In addition, the information we choose to publicly disclose regarding a particular study or clinical trial is based on what is typically extensive information, and you or others may not agree with what we determine is material or otherwise appropriate information to include in our disclosure.

Results of earlier studies and trials of our product candidates may not be predictive of future trial results.

Success in preclinical studies and early clinical trials does not ensure that later clinical trials will be successful. Product candidates in later stages of clinical trials may fail to show the desired safety and efficacy traits despite having progressed through preclinical studies and initial clinical trials. Even if we are able to commence clinical trials, issues may arise that could suspend or terminate such clinical trials. A number of companies in the biotechnology and pharmaceutical industries have suffered significant setbacks in clinical trials, even after positive results in earlier preclinical studies or clinical trials. These setbacks have been caused by, among other things, preclinical findings made while clinical trials were underway and safety or efficacy observations made in clinical trials, including previously unreported adverse events. Notwithstanding any potential promising results in earlier studies and trials, we cannot be certain that we will not face similar setbacks. In addition, the results of our preclinical animal studies, including our oncology mouse studies and animal studies, may not be predictive of the results of outcomes in human clinical trials. For example, our oncology product candidates that are in preclinical development may demonstrate different chemical and

70

Table of Contents

biological properties in patients than they do in laboratory animal studies or may interact with human biological systems in unforeseen or harmful ways.

Our replicating technology is early in clinical development and could therefore prove to be unsafe.

Our replicating technology is an attenuated viral vector technology which is in a Phase 1/2 clinical trial. If our ongoing Phase 1/2 clinical trial for HB-200 causes unexpected side effects that are not tolerable in the treatment of the relevant patient group, the further development of the product candidate and any other potential products based on the replicating technology may be significantly limited or become impossible. Although clinical trials of onco-viral therapies have supported their role as a potential treatment for cancer, there is the risk of uncontrolled replication in vivo and possible transmission to patients' contacts, such as other patients and health care workers. In recent years, clinical trials to address these concerns have been conducted. Any such transmission by our product candidates or a competitor would have an adverse impact on our future research and development efforts.

Our product candidates are based on a novel approach to the treatment of cancer, which makes it difficult to predict the time and cost of product candidate development.

We have concentrated all of our research and development efforts on product candidates based on our non-replicating and replicating technologies, and our future success depends on the successful development of this therapeutic approach. Our non-replicating and replicating technologies utilize arenaviruses to activate CD8+ T cells and induce pathogen-neutralizing antibodies. There are no approved products that utilize the arenavirus. Because our non-replicating and replicating technologies are novel, regulatory agencies may lack experience with product candidates which may lengthen the regulatory review process, increase our development costs and delay or prevent commercialization of our product candidates. We have not yet succeeded and may not succeed in demonstrating safety and efficacy for any of our product candidates in ongoing or late-stage clinical trials or in obtaining marketing approval thereafter.

In addition, our vectors are live, gene-modified organisms for which the FDA, the EU and other comparable foreign regulatory authorities and other public health authorities, such as the Centers of Disease Control and Prevention and hospitals involved in clinical studies, have established additional safety and contagion rules and procedures, which could establish additional hurdles for the development, manufacture or use of our vectors. These hurdles may lead to delays in the conduct of clinical trials or in obtaining regulatory approvals for further development, manufacturing or commercialization of our product candidates. We may also experience delays in transferring our process to commercial partners, which may prevent us from completing our clinical trials or commercializing our product candidates on a timely or profitable basis, if at all.

Since the number of patients that we plan to dose in some of our planned clinical trials is small, the results from such clinical trials, once completed, may be less reliable than results achieved in larger clinical trials, which may hinder our efforts to obtain regulatory approval for our product candidates.

A trial design that is considered appropriate for regulatory approval includes a sufficiently large sample size with appropriate statistical power, as well as proper control of bias, to allow a meaningful interpretation of the results. In the Phase 2 portion of our Phase 1/2 trial for HB‑200 in combination with pembrolizumab, we expect to enroll two groups of 10 to 20 patients each. Future trials for HB‑200 or other product candidates may similarly enroll a small number of patients although some trials will require the enrollment of more patients. The preliminary results of trials with smaller sample sizes can be disproportionately influenced by the impact the treatment had on a few individuals, which limits the ability to generalize the results across a broader community, making the trial results less reliable than trials with a larger number of patients. As a result, there may be less certainty that such product candidates would achieve a statistically significant effect in any future clinical trials. If we conduct any future clinical trials, we may not achieve a statistically significant result or the same level of statistical significance, if any, that would have been possible to achieve in a larger trial.

71

Table of Contents

Our product candidates may cause serious adverse events, undesirable side effects or have other properties that could halt their clinical development, prevent their regulatory approval, require expansion of the trial size, limit their commercial potential or result in significant negative consequences.

Undesirable side effects caused by our product candidates could cause us or regulatory authorities, including IRBs or ethics committees, to interrupt, delay or halt clinical trials and could result in a more restrictive label or the delay or denial of regulatory approval by the FDA, the European Commission or other comparable foreign regulatory authorities. Further, clinical trials by their nature utilize a sample of the potential patient population. With a limited number of subjects and limited duration of exposure, rare and severe side effects of our product candidates may only be uncovered with a significantly larger number of patients exposed to the drug. Because of our dose escalation design for our clinical trials, undesirable side effects could also result in an expansion in the size of our clinical trials, increasing the expected costs and timeline of our clinical trials. Additionally, results of our trials could reveal a high and unacceptable severity and prevalence of side effects or unexpected characteristics. If we do observe severe side effects in our clinical trials, our ongoing clinical trials may be halted or put on clinical hold prior to completion if there is an unacceptable safety risk for patients.

If unacceptable toxicities arise in the development of our product candidates, we could suspend or terminate our trials or the FDA, the competent authorities of EU Member States or other comparable foreign regulatory authorities, or local regulatory authorities such as IRBs or ethics committees, could order us to cease clinical trials. Competent national health authorities, such as the FDA or the European Commission, could also deny approval of our product candidates for any or all targeted indications. Even if the side effects presented do not preclude the product from obtaining or maintaining marketing approval, treatment-related side effects could also affect patient recruitment or the ability of enrolled patients to complete the trial or result in potential product liability claims. In addition, these side effects may not be appropriately recognized or managed by the treating medical staff. We expect to have to train medical personnel using our product candidates, if approved, to understand the side effect profile of these technologies for both our planned clinical trials and upon any commercialization of any product candidates, if approved. Inadequate training in recognizing or managing the potential side effects of our technologies could result in patient deaths. Any of these occurrences may harm our business, financial condition and prospects significantly.

If we encounter difficulties enrolling patients in our clinical trials, our clinical development activities could be delayed or otherwise adversely affected.

We may experience difficulties in patient enrollment in our clinical trials for a variety of reasons. The timely completion of clinical trials in accordance with their protocols depends, among other things, on our ability to enroll a sufficient number of patients who remain in the trial until its conclusion. The enrollment of patients depends on many factors, including:

72

Table of Contents

In addition, our clinical trials will compete with other clinical trials for product candidates that are in the same therapeutic areas as our product candidates or similar areas, and this competition will reduce the number and types of patients available to us because some patients who might have opted to enroll in our trials may instead opt to enroll in a trial being conducted by one of our competitors. Since the number of qualified clinical investigators is limited, we expect to conduct some of our clinical trials at the same clinical trial sites that some of our competitors use, which will reduce the number of patients who are available for our clinical trials at such clinical trial sites. Moreover, because our product candidates represent a departure from more commonly used methods for the treatment of infectious diseases and cancers, potential patients and their doctors may be inclined to use conventional therapies, such as chemotherapy and hematopoietic stem cell transplantation, rather than enroll patients in any future clinical trial. Additionally, because some of our clinical trials will be in patients with relapsed or refractory cancer, the patients are typically in the late stages of the disease and may experience disease progression independent from our product candidates, making them unevaluable for purposes of the trial and requiring additional enrollment.

Delays in patient enrollment may result in increased costs or may affect the timing or outcome of our ongoing and planned clinical trials, which could prevent completion or commencement of these trials and adversely affect our ability to advance the development of our product candidates.

We have limited experience as a company conducting clinical trials.

We have limited experience as a company in conducting clinical trials. In part because of this lack of experience, we cannot be certain that our ongoing clinical trials will be completed on time or if our planned clinical trials will begin at all. Large scale trials would require significant additional financial and management resources and reliance on third-party clinical investigators, contract research organizations (CROs), or consultants. Relying on third-party clinical investigators or CROs may force us to encounter delays that are outside of our control.

The market opportunities for our oncology product candidates may be limited to those patients who are ineligible for or have failed prior treatments.

Cancer therapies are characterized as first line, second line, or third line, and the FDA and comparable foreign regulatory authorities often approve new therapies initially only for a particular line of use. When cancer is detected early enough, first line therapy is sometimes adequate to cure the cancer or prolong life without a cure. Whenever first line therapy, usually chemotherapy, antibody drugs, tumor-targeted small molecules, hormone therapy, radiation therapy, surgery, or a combination of these, proves unsuccessful, second line therapy may be administered. Second line therapies often consist of more chemotherapy, radiation, antibody drugs, tumor-targeted small molecules, or a combination of these. Third line therapies can include hematopoietic stem cell transplantation in certain cancers, chemotherapy, antibody drugs, and small molecule tumor-targeted therapies, more invasive forms of surgery, and new revolutionary technologies. We expect to initially seek approval of our product candidates in most instances at least as a third line therapy, for use in patients with relapsed or refractory metastatic cancer. Subsequently, for those product candidates that prove to be sufficiently safe and beneficial, if any, we would expect to seek approval as a second line therapy and potentially as a first line therapy, but there is no guarantee that our product candidates, even if approved as a third or subsequent line of therapy, would be approved for an earlier line of therapy, and, prior to any such approvals, we may have to conduct additional clinical trials.

73

Table of Contents

If the market opportunities for our product candidates are smaller than we believe they are, even assuming approval of a drug candidate, our business may suffer.

Our projections of both the number of people who have the infectious diseases and cancers we are targeting, as well as the subset of people with these infectious diseases and cancers in a position to receive a particular line of therapy and who have the potential to benefit from treatment with our product candidates, are based on our beliefs and estimates. These estimates have been derived from a variety of sources, including scientific literature, commissioned reports, surveys of clinics, patient foundations or market research, and may prove to be incorrect. Further, new therapies may change the estimated incidence or prevalence of these cancers. The number of patients may turn out to be lower than expected. Additionally, the potentially addressable patient population for our product candidates may be limited or may not be amenable to treatment with our product candidates. Even if we obtain significant market share for our product candidates within our addressable patient population, because the potential target populations are small, we may never achieve profitability without obtaining regulatory approval for additional indications, including use as first or second line therapy.

Even if we obtain regulatory approval of our product candidates, the products may not gain market acceptance among physicians, patients, hospitals, cancer treatment centers, third-party payors and others in the medical community.

The use of an arenavirus for the treatment of infectious diseases and tumors is a recent development and may not become broadly accepted by physicians, patients, hospitals, cancer treatment centers and others in the medical community. Various factors will influence whether our product candidates, if approved, are accepted in the market, including:

74

Table of Contents

In addition, although we are not utilizing fully replication competent live virus vectors, our replicating technology uses a replication attenuated vector and adverse publicity due to the ethical and social controversies surrounding the therapeutic use of such technologies, and reported side effects from any clinical trials using these technologies or the failure of such trials to demonstrate that these therapies are safe and effective may limit market acceptance of our product candidates. If our product candidates are approved but fail to achieve market acceptance among physicians, patients, hospitals, cancer treatment centers, third-party payors or others in the medical community, we will not be able to generate significant revenue and we may not become profitable.

Even if we, or any future collaborators, are able to commercialize any product candidate that we, or they, develop, the product may become subject to unfavorable pricing laws, regulations or third-party payor coverage and reimbursement policies, any of which could harm our business.

In the United States and markets in other countries, patients generally rely on third-party payors to reimburse all or part of the costs associated with their treatment. Adequate coverage and reimbursement from governmental healthcare programs, such as Medicare and Medicaid, and commercial payors is critical to new product acceptance. Our ability to successfully commercialize our product candidates will depend in part on the extent to which coverage and adequate reimbursement for these products and related treatments will be available from government health administration authorities, private health insurers and other organizations. These third-party payors decide which medications they will pay for and establish reimbursement levels. The availability of coverage and extent of reimbursement by governmental and private payors is essential for most patients to be able to afford many types of treatments. Sales of these or other product candidates that we may identify will depend substantially, both domestically and abroad, on the extent to which the costs of our product candidates will be paid by health maintenance, managed care, pharmacy benefit and similar healthcare management organizations, or reimbursed by government health administration authorities, private health coverage insurers and other third-party payors. See “Item 1. Business – Government Regulation – Coverage and Reimbursement.”

Net prices for drugs may be reduced by mandatory discounts or rebates required by government healthcare programs or private payors and by any future relaxation of laws that presently restrict imports of drugs from countries where they may be sold at lower prices than in the United States.

Increasingly, third-party payors are requiring that drug companies provide them with predetermined discounts from list prices and are challenging the prices charged for medical products. We cannot be sure that reimbursement will be available for any product candidate that we commercialize and, if reimbursement is available, the level of reimbursement.

In addition, many pharmaceutical manufacturers must calculate and report certain price reporting metrics to the government, such as average sales price (ASP), and best price. Penalties may apply in some cases when such metrics are not submitted accurately and timely. Further, these prices for drugs may be reduced by mandatory discounts or rebates required by government healthcare programs.

Additionally, we, or our collaborators may develop companion diagnostic tests for use with our product candidates. We, or our collaborators, will be required to obtain coverage and reimbursement for these tests separate and apart from the coverage and reimbursement we may seek for our product candidates. While we have not yet developed any companion diagnostic tests for our product candidates, if we do, there is significant uncertainty regarding our ability to obtain coverage and adequate reimbursement for the same reasons applicable to our product candidates.

In addition, the requirements governing drug pricing vary widely from country to country. In some foreign countries, the proposed pricing for a drug must be approved before it may be lawfully marketed. For example, the European Union provides options for its Member States to restrict the range of medicinal products for which their national health insurance systems provide reimbursement and to control the prices of medicinal products for human use. An EU Member State may approve a specific price for the medicinal product, it may refuse to reimburse a product at the price set by the manufacturer or it may instead adopt a system of direct or indirect controls on the profitability of the company placing the medicinal product on the market. Many EU Member States also periodically review their reimbursement procedures for medicinal products, which could have an adverse impact on reimbursement status.

75

Table of Contents

Moreover, in order to obtain reimbursement for our products in some European countries, including some EU Member States, we may be required to compile additional data comparing the cost-effectiveness of our products to other available therapies. This Health Technology Assessment (“HTA”) of medicinal products is becoming an increasingly common part of the pricing and reimbursement procedures in some EU Member States, including those representing the larger markets. The HTA process is the procedure to assess therapeutic, economic and societal impact of a given medicinal product in the national healthcare systems of the individual country. The outcome of an HTA will often influence the pricing and reimbursement status granted to these medicinal products by the competent authorities of individual EU Member States. The extent to which pricing and reimbursement decisions are influenced by the HTA of the specific medicinal product currently varies between EU Member States. There can be no assurance that any country that has price controls or reimbursement limitations for pharmaceutical products will allow favorable reimbursement and pricing arrangements for any of our product candidates. Historically, products launched in the European Union do not follow price structures of the U.S. and generally prices tend to be significantly lower.

We cannot predict whether we will receive reimbursement from third-party payors for any product we may successfully commercialize in the future. Any reimbursement we may receive might not be adequate for use to generate significant revenue and we may not become profitable.

We are developing, and in the future may develop, other product candidates, in combination with other therapies, which exposes us to additional risks.

Our HB-200 program is being developed to be used in combination with or without an approved checkpoint inhibitor, a currently approved cancer therapy. In the future, we may develop other product candidates to be used with one or more currently approved cancer therapies. Even if any product candidate we develop were to receive marketing approval or be commercialized for use in combination with other existing therapies, we would continue to be subject to the risks that the FDA or similar regulatory authorities outside of the United States could revoke approval of the therapy used in combination with our product candidate or that safety, efficacy, manufacturing or supply issues could arise with these existing therapies. Combination therapies are commonly used for the treatment of cancer, and we would be subject to similar risks if we develop any of our product candidates for use in combination with other drugs or for indications other than cancer. This could result in our own products being removed from the market or being less successful commercially. In addition, if the results from our combination trials are not significantly better than results from the existing therapy that we are combining with, then regulatory authorities, clinical investigators, physicians and patients may perceive our product candidates negatively, which could adversely affect enrollment in our clinical trials, approval by regulatory authorities or commercial adoption of our product candidates, if approved.

We may also evaluate our future product candidates in combination with one or more other cancer therapies that have not yet been approved for marketing by the FDA or similar regulatory authorities outside of the United States. We will not be able to market any product candidate we develop in combination with any such unapproved cancer therapies that do not ultimately obtain marketing approval.

If the FDA or similar regulatory authorities outside of the United States do not approve these other drugs or revoke their approval of, or if safety, efficacy, manufacturing, or supply issues arise with, the drugs we choose to evaluate in combination with any product candidate we develop, we may be unable to obtain approval.

Negative developments in the field of immuno-oncology and virus-based therapies could damage public perception of any of our product candidates and negatively affect our business.

The commercial success of product candidates based on our replicating technology will depend in part on public acceptance of the use of cancer immunotherapies. Adverse events in the HB-200 program or our other product candidates based on our replicating technology or in clinical trials of others developing similar products and the resulting publicity, as well as any other negative developments in the field of immuno-oncology that may occur in the future, including in connection with competitor therapies, could result in a decrease in demand for any product candidates based on our replicating technology that we may develop. These events could also result in the suspension, discontinuation, or clinical hold of or modification to our clinical trials. If public perception is influenced by claims that the use of cancer immunotherapies is unsafe, whether related to our therapies or those of our competitors, our product candidates may not

76

Table of Contents

be accepted by the general public or the medical community and potential clinical trial subjects may be discouraged from enrolling in our clinical trials. In addition, responses by national or state governments to negative public perception may result in new legislation or regulations that could limit our ability to develop or commercialize any product candidates, obtain or maintain regulatory approval or otherwise achieve profitability. More restrictive statutory regimes, government regulations or negative public opinion would have an adverse effect on our business, financial condition, prospects and results of operations and may delay or impair the development and commercialization of our product candidates or demand for any products we may develop. As a result, we may not be able to continue or may be delayed in conducting our development programs.

Our product candidates consist of a modified virus. Adverse developments in clinical trials of other immunotherapy products based on viruses, like oncolytic viruses, may result in a disproportionately negative effect for our non-replicating and replicating technologies as compared to other products in the field of infectious disease and immuno-oncology that are not based on viruses. Future negative developments in the biopharmaceutical industry could also result in greater governmental regulation, stricter labeling requirements and potential regulatory delays in the testing or approvals of our products. Any increased scrutiny could delay or increase the costs of obtaining marketing approval for our product candidates.

We may not be successful in our efforts to identify and successfully commercialize additional product candidates.

Part of our strategy involves identifying novel product candidates. We have developed a pipeline of product candidates and intend to pursue clinical development of additional product candidates utilizing our non-replicating and replicating technologies. The process by which we identify product candidates may fail to yield product candidates for clinical development for a number of reasons, including those discussed in these risk factors and also:

Developing, obtaining regulatory approval for and commercializing additional product candidates will require substantial additional funding and is prone to the risks of failure inherent in medical product development. We cannot provide you with any assurance that we will be able to successfully advance any of these additional product candidates through the development process.

77

Table of Contents

We may expend our limited resources to pursue a particular product candidate or indication and fail to capitalize on product candidates or indications that may be more profitable or for which there is a greater likelihood of success.

We may choose to focus our efforts on and allocate resources to a potential product candidate that ultimately proves to be unsuccessful, or to license or purchase a marketed product that does not meet our financial expectations. As a result, we may fail to capitalize on viable commercial products or profitable market opportunities, be required to forego or delay pursuit of opportunities with other product candidates or other diseases that may later prove to have greater commercial potential, or relinquish valuable rights to such product candidates through collaboration, licensing or other royalty arrangements in cases in which it would have been advantageous for us to retain sole development and commercialization rights. Our spending on current and future research and development programs and product candidates for specific indications may not yield any commercially viable products. If we are unable to evaluate the commercial potential or target market for a particular product candidate, identify and successfully commercialize additional suitable product candidates, this would adversely impact our business strategy and our financial position.

We face significant competition from other biotechnology and pharmaceutical companies, and our operating results will suffer if we fail to compete effectively.

The biopharmaceutical industry is characterized by intense competition and rapid innovation. Our competitors may be able to develop other products or drugs that are able to achieve similar or better results. Our potential competitors include major multinational pharmaceutical companies, established biotechnology companies, specialty pharmaceutical companies and universities and other research institutions. Many of our competitors have substantially greater financial, technical and other resources, such as larger research and development staff and experienced marketing and manufacturing organizations and well-established sales forces. In addition, many of these competitors are active in seeking patent protection and licensing arrangements in anticipation of collecting royalties for use of technology that they have developed. Smaller or early-stage companies may also prove to be significant competitors, particularly through collaborative arrangements with large, established companies. Established pharmaceutical companies may also invest heavily to accelerate discovery and development of novel therapeutics or to in-license novel therapeutics that could make the product candidates that we develop obsolete. Mergers and acquisitions in the biotechnology and pharmaceutical industries may result in even more resources being concentrated in our competitors. Competition may increase further as a result of advances in the commercial applicability of technologies and greater availability of capital for investment in these industries. Our competitors, either alone or with collaborative partners, may succeed in developing, acquiring or licensing on an exclusive basis drug or biologic products that are more effective, safer, more easily commercialized or less costly than our product candidates or may develop proprietary technologies or secure patent protection that we may need for the development of our technologies and products. We believe the key competitive factors that will affect the development and commercial success of our product candidates are efficacy, safety, tolerability, reliability, convenience of use, price and reimbursement.

In immuno-oncology for HPV16+ cancers, we face competition from companies such as BioNtech AG, Cue Biopharma, Inc., ISA Pharmaceuticals B.V., in collaboration with Regeneron Pharmaceuticals, Inc., Kite Pharma, a Gilead company, and PDS Biotechnology Corporation. Even if we obtain regulatory approval of our product candidates, the availability and price of our competitors’ products could limit the demand and the price we are able to charge for our product candidates. In addition, other immuno-oncology companies are developing the following technologies, including, but not limited to, neoantigens, bispecific antibodies, engineered cell therapies and tumor specific antigens in areas outside of HPV16+ cancers.

We may not be able to implement our business plan if the acceptance of our product candidates is inhibited by price competition or the reluctance of physicians to switch from existing methods of treatment to our product candidates, or if physicians switch to other new drug or biologic products or choose to reserve our product candidates for use in limited circumstances.

78

Table of Contents

If product liability lawsuits are brought against us, we may incur substantial liabilities and may be required to limit commercialization of our product candidates.

We face an inherent risk of product liability as a result of the clinical testing of our product candidates and will face an even greater risk if we commercialize any products. For example, we may be sued if our product candidates cause or are perceived to cause injury or are found to be otherwise unsuitable during clinical testing, manufacturing, marketing or sale. Any such product liability claims may include allegations of defects in manufacturing, defects in design, a failure to warn of dangers inherent in the product, negligence, strict liability or a breach of warranties. Claims could also be asserted under state consumer protection acts. If we cannot successfully defend ourselves against product liability claims, we may incur substantial liabilities or be required to limit commercialization of our product candidates. Even successful defense would require significant financial and management resources. Regardless of the merits or eventual outcome, liability claims may result in:

Failure to obtain or retain sufficient product liability insurance at an acceptable cost to protect against potential product liability claims could prevent or inhibit the commercialization of products we develop, alone or with corporate collaborators. Although we have clinical trial insurance, our insurance policies also have various exclusions, and we may be subject to a product liability claim for which we have no coverage. In the future, we may be unable to maintain this insurance coverage, or we may not be able to obtain additional or replacement insurance at a reasonable cost, if at all. We may have to pay any amounts awarded by a court or negotiated in a settlement that exceed our coverage limitations or that are not covered by our insurance, and we may not have, or be able to obtain, sufficient capital to pay such amounts. Even if our agreements with any future corporate collaborators entitle us to indemnification against losses, such indemnification may not be available or adequate should any claim arise.

A variety of risks associated with operating our business internationally could materially adversely affect our business.

Many of our employees and a significant portion of our operations are located outside the United States, including in Vienna, Austria. In addition, we plan to seek regulatory approval of our product candidates outside of the

79

Table of Contents

United States and, accordingly, we expect that we, and any potential collaborators in those jurisdictions, will be subject to additional risks related to operating in foreign countries, including:

These and other risks associated with our planned international operations may materially adversely affect our ability to attain or maintain profitable operations.

Natural disasters, geopolitical unrest, war, terrorism, public health issues or other catastrophic events could disrupt the supply, delivery or demand of products and reduce our ability to access capital, which could negatively affect our operations and performance.

We are subject to the risk of disruption by earthquakes, floods and other natural disasters, fire, power shortages, geopolitical unrest, war, terrorist attacks and other hostile acts, public health issues, epidemics or pandemics and other events beyond our control and the control of the third parties on which we depend. Any of these catastrophic events, whether in the United States, Europe or abroad, may have a strong negative impact on the global economy, our employees, facilities, partners, suppliers, distributors or customers, and could decrease demand for our products, create delays and inefficiencies in our supply chain and make it difficult or impossible for us to continue preclinical studies or clinical trials, seek and receive approval for any of our product candidates by the FDA and comparable foreign regulatory authorities, or deliver products to our customers. Further, disruption of global financial markets and a recession or market correction, including as a result of any resurgence of the coronavirus pandemic, the ongoing military conflict between Russia and Ukraine and the related sanctions imposed against Russia, any escalation of the conflict in Israel and the Gaza Strip, and other global macroeconomic factors, could reduce our ability to access capital, which could, in the future, negatively affect our business.

80

Table of Contents

Our business may be adversely affected by a pandemic, epidemic or outbreak of an infectious disease, such as the recent coronavirus pandemic or other emerging global health threats on business and operations.

Our business could be adversely affected by health epidemics in regions where we have concentrations of clinical trial sites or other business activities and could cause significant disruption in the operations of third-party contract manufacturers and contract research organizations upon whom we rely, as well as our ability to recruit patients for our clinical trials. For example, the recent coronavirus pandemic had unpredictable impacts on global societies, economies, financial markets, and business practices around the world, and caused temporary delays and disruptions in our clinical development operations.

​

We currently have no marketing and sales organization and have no experience in marketing products. If we are unable to establish marketing and sales capabilities or enter into agreements with third parties to market and sell our product candidates, if approved, we may not be able to generate product revenue.

We currently have no sales, marketing or distribution capabilities and have no experience in marketing products. Our operations to date have been limited to organizing and staffing our company, business planning, raising capital, undertaking preclinical studies and clinical trials of product candidates, securing related intellectual property rights and conducting discovery, research and development activities for our programs. We intend to develop an in-house marketing organization and sales force, which will require significant capital expenditures, management resources and time. We will have to compete with other biotechnology and pharmaceutical companies to recruit, hire, train and retain marketing and sales personnel. There are risks involved with both establishing our own sales and marketing capabilities and entering into arrangements with third parties to perform these services. For example, recruiting and training a sales force is expensive and time-consuming and could delay any product launch. If the commercial launch of a product candidate for which we recruit a sales force and establish marketing capabilities is delayed or does not occur for any reason, we would have prematurely or unnecessarily incurred these commercialization expenses. This may be costly, and our investment would be lost if we cannot retain or reposition our sales and marketing personnel. In addition, there can be no assurance that we will be able to develop inhouse sales and distribution capabilities or establish or maintain relationships with third-party collaborators to commercialize any product in the United States or overseas.

Insurance policies are expensive and protect us only from some business risks, which leaves us exposed to significant uninsured liabilities.

We do not carry insurance for all categories of risk that our business may encounter. Some of the policies we currently maintain include general liability, employment practices liability, property, umbrella, and directors’ and officers’ insurance.

Insurance coverage is becoming increasingly expensive and in the future we may not be able to maintain insurance coverage at a reasonable cost or in sufficient amounts to protect us against losses due to liability. We do not carry specific biological or hazardous waste insurance coverage, and our property, casualty and general liability insurance policies specifically exclude coverage for damages and fines arising from biological or hazardous waste exposure or contamination. Accordingly, in the event of contamination or injury, we could be held liable for damages or be penalized with fines in an amount exceeding our resources, and our clinical trials or regulatory approvals could be suspended.

We also expect that firming of the insurance market will make it more difficult and more expensive for us to obtain director and officer liability insurance, and we may be required to accept reduced policy limits and coverage or incur substantially higher costs to obtain the same or similar coverage. As a result, it may be more difficult for us to attract and retain qualified people to serve on our board of directors, our board committees or as executive officers. We do not know, however, if we will be able to maintain existing insurance with adequate levels of coverage. Any significant uninsured liability may require us to pay substantial amounts, which would adversely affect our cash position and results of operations.

81

Table of Contents

Exchange rate fluctuations may materially affect our results of operations and financial conditions.

Owing to the international scope of our operations, fluctuations in exchange rates, particularly between the U.S. dollar and the euro, may adversely affect us. Although we are incorporated in Delaware in the United States, we have significant research and development operations in Austria, and source third-party manufacturing, consulting and other services in the European Union. As a result, our business and the price of our common stock may be affected by fluctuations in foreign exchange rates, which may have a significant impact on our results of operations and cash flows from period to period. Currently, we do not have any exchange rate hedging arrangements in place.

Risks Related to Our Reliance on Third Parties

We are fully dependent on our collaboration with Gilead for the development of our HBV programs, rely on funding from Gilead for development of our human immunodeficiency virus program, and may depend on Gilead or additional third parties for the development and commercialization of our other programs and future product candidates. Our current and future collaborators may control aspects of our clinical trials, which could result in delays or other obstacles in the commercialization of the product candidates we develop. If our collaborations are not successful, we may not be able to capitalize on the market potential of these product candidates

We are currently party to collaborations with Gilead to help expand and advance our pipeline of candidates. In the future, we may form or seek other strategic alliances, joint ventures, or collaborations, or enter into additional licensing arrangements with third parties that we believe will complement or augment our development and commercialization efforts with respect to product candidates we develop.

Our current collaborations pose, and potential future collaborations involving our product candidates may pose, the following risks to us:

82

Table of Contents

As a result, if we enter into additional collaboration agreements and strategic partnerships, or license our intellectual property, products or businesses, we may not be able to realize the benefit of such transactions if we are unable to successfully integrate them with our existing operations, which could delay our timelines or otherwise adversely affect our business. We also cannot be certain that, following a strategic transaction or license, we will achieve the revenue or specific net income that justifies such transaction. Any delays in entering into new collaborations or strategic partnership agreements related to any product candidate we develop could delay the development and commercialization of our other product candidates, which would harm our business prospects, financial condition, and results of operations.

We may seek to establish additional collaborations, and, if we are not able to establish them on commercially reasonable terms, we may have to alter our development and commercialization plans.

The advancement of our product candidates and development programs and the potential commercialization of our current and future product candidates will require substantial additional cash to fund expenses. For some of our programs, we may decide to collaborate with additional biotechnology and pharmaceutical companies with respect to development and potential commercialization. Any of these relationships may require us to incur non-recurring and other charges, increase our near and long term expenditures, issue securities that dilute our existing stockholders, or disrupt our management and business. We will likely have limited control over the amount and timing of resources that our collaborators dedicate to the development or commercialization of any product candidates we may seek to develop with them. We cannot predict the success of any collaboration that we have entered into or will enter into. For example, in January 2024 Roche notified us of their decision to terminate the Roche Collaboration Agreement despite acknowledging we had met all go-forward criteria under the agreement.

We face significant competition in seeking appropriate strategic partners and the negotiation process is time-consuming and complex. Whether we reach a definitive agreement for other collaborations will depend, among other things, upon our assessment of the collaborator’s resources and expertise, the terms and conditions of the proposed collaboration and the proposed collaborator’s evaluation of a number of factors. Those factors may include the design or results of clinical trials, the progress of our clinical trials, the likelihood of approval by the FDA or similar regulatory authorities outside the United States, the potential market for the subject product candidate, the costs and complexities of manufacturing and delivering such product candidate to patients, the potential of competing products, the existence of

83

Table of Contents

uncertainty with respect to our ownership of technology, which can exist if there is a challenge to such ownership without regard to the merits of the challenge and industry and market conditions generally. The collaborator may also consider alternative product candidates or technologies for similar indications that may be available to collaborate on and whether such a collaboration could be more attractive than the one with us for our product candidate. Further, we may not be successful in our efforts to establish a strategic partnership or other alternative arrangements for future product candidates because they may be deemed to be at too early of a stage of development for collaborative effort and third parties may not view them as having the requisite potential to demonstrate safety and efficacy.

We may also be restricted under existing collaboration agreements from entering into future agreements on certain terms with potential collaborators. For example, under the Restated Gilead Collaboration Agreement, we have granted worldwide exclusive rights to Gilead for using our technologies to develop treatments for HBV, and during the term of the agreement we will be restricted from granting similar rights to other parties. This exclusivity could limit our ability to enter into strategic collaborations with future collaborators.

In addition, there have been a significant number of recent business combinations among large pharmaceutical companies that have resulted in a reduced number of potential future collaborators.

We may not be able to negotiate collaborations on a timely basis, on acceptable terms, or at all. If we are unable to do so, we may have to curtail the development of the product candidate for which we are seeking to collaborate, reduce or delay its development program or one or more of our other development programs, delay its potential commercialization or reduce the scope of any sales or marketing activities, or increase our expenditures and undertake development or commercialization activities at our own expense. If we elect to increase our expenditures to fund development or commercialization activities on our own, we may need to obtain additional capital, which may not be available to us on acceptable terms or at all. If we fail to enter into collaborations or do not have sufficient funds, we may not be able to further develop our product candidates or bring them to market and generate product revenue.

We rely and will continue to rely on third parties to conduct our clinical trials. If these third parties do not properly and successfully carry out their contractual duties or meet expected deadlines, we may not be able to obtain regulatory approval of or commercialize our product candidates.

We depend and will continue to depend upon independent investigators and collaborators, such as medical institutions, CROs, CMOs and strategic partners to conduct our preclinical studies and clinical trials under agreements with us. We expect to have to negotiate budgets and contracts with CROs, trial sites and CMOs which may result in delays to our development timelines and increased costs. We will rely heavily on these third parties over the course of our clinical trials, and we control only certain aspects of their activities. As a result, we have less direct control over the conduct, timing and completion of these clinical trials and the management of data developed through clinical trials than would be the case if we were relying entirely upon our own staff.

Nevertheless, we are responsible for ensuring that each of our studies is conducted in accordance with applicable protocol, legal and regulatory requirements and scientific standards, and our reliance on third parties does not relieve us of our regulatory responsibilities. We and these third parties are required to comply with GCPs, which are regulations and guidelines enforced by the FDA and comparable foreign regulatory authorities for product candidates in clinical development. Regulatory authorities enforce these GCPs through periodic inspections of trial sponsors, principal investigators and trial sites. If we or any of these third parties fail to comply with applicable GCP regulations, the clinical data generated in our clinical trials may be deemed unreliable and the FDA or comparable foreign regulatory authorities may require us to perform additional clinical trials before approving our marketing applications. We cannot assure you that, upon inspection, such regulatory authorities will determine that any of our clinical trials comply with the GCP regulations. In addition, our clinical trials must be conducted with biologic product produced under current good manufacturing practices (cGMP) regulations and will require a large number of test patients. Our failure or any failure by these third parties to comply with these regulations or to recruit a sufficient number of patients may require us to repeat clinical trials, which would delay the regulatory approval process. Moreover, our business may be implicated if any of these third parties violates federal or state fraud and abuse or false claims laws and regulations or healthcare privacy and security laws.

84

Table of Contents

Any third parties conducting our clinical trials are and will not be our employees and, except for remedies available to us under our agreements with such third parties, we cannot control whether or not they devote sufficient time and resources to our ongoing, clinical and nonclinical programs. These third parties may also have relationships with other commercial entities, including our competitors, for whom they may also be conducting clinical studies or other drug development activities, which could affect their performance on our behalf. If these third parties do not successfully carry out their contractual duties or obligations or meet expected deadlines, if they need to be replaced or if the quality or accuracy of the clinical data they obtain is compromised due to the failure to adhere to our clinical protocols or regulatory requirements or for other reasons, our clinical trials may be extended, delayed or terminated and we may not be able to complete development of, obtain regulatory approval of or successfully commercialize our product candidates. As a result, our financial results and the commercial prospects for our product candidates would be harmed, our costs could increase and our ability to generate revenue could be delayed.

Switching or adding third parties to conduct our clinical trials involves substantial cost and requires extensive management time and focus. In addition, there is a natural transition period when a new third party commences work. As a result, delays occur, which can materially impact our ability to meet our desired clinical development timelines.

We rely and expect to continue to rely on third parties to manufacture our clinical product supplies, and we may rely on third parties for at least a portion of the manufacturing process of our product candidates, if approved. Our business could be harmed if those third parties fail to provide us with sufficient quantities of clinical product supplies or product candidates or fail to do so at acceptable quality levels or prices.

We do not currently own any facility that may be used as our clinical-scale manufacturing and processing facility and must currently rely on outside vendors to manufacture our product candidates. We have not yet caused our product candidates to be manufactured or processed on a commercial scale and may not be able to do so for any of our product candidates.

The manufacture of biological drug products is complex and requires significant expertise and capital investment, including the development of advanced manufacturing techniques and process controls. Manufacturers of biologic products often encounter difficulties in production, particularly in scaling up or out, validating the production process and assuring high reliability of the manufacturing process, including the absence of contamination. These problems include logistics and shipping, difficulties with production costs and yields, quality control, including lot consistency, stability of the product, product testing, operator error and availability of qualified personnel, as well as compliance with strictly enforced federal, state and foreign regulations. We have encountered problems with our third party manufacturers in the past, including delays and low yields, and there can be no assurance that we will not encounter similar or other difficulties in the future.

Furthermore, if contaminants are discovered in our supply of our product candidates or in the manufacturing facilities, such manufacturing facilities may need to be closed for an extended period of time to investigate and remedy the contamination. We cannot assure you that any stability failures or other issues relating to the manufacture of our product candidates will not occur in the future.

Our reliance on a limited number of third-party manufacturers exposes us to the following risks:

85

Table of Contents

Any of these risks could delay or prevent the completion of our clinical trials or the approval of any of our product candidates by the FDA and comparable foreign regulatory authorities, result in higher costs or adversely impact commercialization of our product candidates. In addition, we will rely on third parties to perform certain specification tests on our product candidates prior to delivery to patients. If these tests are not appropriately done and test data are not reliable, patients could be put at risk of serious harm and the FDA and comparable foreign regulatory authorities could place significant restrictions on our company until deficiencies are remedied.

Despite our efforts to audit and verify regulatory compliance, one or more of our third-party manufacturing vendors may be found on regulatory inspection by the FDA, competent authorities of EU Member States or other comparable foreign regulatory authorities to be noncompliant with cGMP regulations. Our failure, or the failure of our third-party manufacturers, to comply with applicable regulations could result in sanctions being imposed on us,

86

Table of Contents

including shutdown of the third-party vendor or invalidation of drug product lots or processes, fines, injunctions, civil penalties, delays, suspension, variation or withdrawal of approvals, license revocation, seizures or recalls of product candidates or drugs, operating restrictions and criminal prosecutions, any of which could significantly and adversely affect supplies of our products, if approved, and significantly harm our business, financial condition, results of operations and prospects.

If our third-party manufacturers use hazardous and biological materials in a manner that causes injury or violates applicable law, we may be liable for damages.

Our research and development activities involve the controlled use of potentially hazardous substances, including chemical and biological materials, by our manufacturers. Our manufacturers are subject to federal, state and local laws and regulations in the United States governing the use, manufacture, storage, handling and disposal of medical and hazardous materials. Although we believe that our manufacturers’ procedures for using, handling, storing and disposing of these materials comply with legally prescribed standards, we cannot completely eliminate the risk of contamination or injury resulting from medical or hazardous materials. As a result of any such contamination or injury, we may incur liability or local, city, state or federal authorities may curtail the use of these materials and interrupt our business operations. In the event of an accident, we could be held liable for damages or penalized with fines, and the liability could exceed our resources. We do not have any insurance for liabilities arising from medical or hazardous materials. Compliance with applicable environmental laws and regulations is expensive, and current or future environmental regulations may impair our research, development and production efforts, which could harm our business, prospects, financial condition or results of operations.

Risks Related to Government Regulation

Even if we receive regulatory approval of our product candidates, we will be subject to ongoing regulatory obligations and continued regulatory review, which may result in significant additional expense and we may be subject to penalties if we fail to comply with regulatory requirements or experience unanticipated problems with our product candidates.

Any regulatory approvals that we receive for our product candidates will require surveillance to monitor the safety and efficacy of the product candidate. The FDA may also require a (REMS) in order to approve our product candidates, which could entail requirements for a medication guide, physician communication plans or additional elements to ensure safe use, such as restricted distribution methods, patient registries and other risk minimization tools. Comparable foreign regulatory authorities may impose similar requirements.

Additionally, under the Food and Drug Omnibus Reform Act of 2022 (FDORA), sponsors of approved drugs and biologics must provide six months’ notice to the FDA of any changes in marketing status, such as the withdrawal of a drug, and failure to do so could result in the FDA placing the product on a list of discontinued products, which would revoke the product’s ability to be marketed.

In addition, if the FDA, the European Commission or another comparable foreign regulatory authority approves our product candidates, the manufacturing processes, labeling, packaging, distribution, adverse event reporting, storage, advertising, promotion, import, export and recordkeeping for any such approved product candidates will be subject to extensive and ongoing regulatory requirements. These requirements include submissions of safety and other post-marketing information and reports, registration, as well as continued compliance with cGMPs and GCPs for any clinical trials that we conduct post-approval. Later discovery of previously unknown problems with our product candidates, including adverse events of unanticipated severity or frequency, or with our third-party manufacturers or manufacturing processes, or our or our distributors’, licensees’ or co-marketers’ failure to comply with changes to regulatory requirements, may result in, among other things:

87

Table of Contents

The FDA’s, the EMA’s and the European Commission and other comparable foreign regulatory authorities’ policies may change and additional government regulations may be enacted that could prevent, limit or delay regulatory approval of our product candidates. As an example, the regulatory landscape related to clinical trials in the EU has evolved. The EU Clinical Trials Regulation, or CTR, which was adopted in April 2014 and repeals the EU Clinical Trials Directive, became applicable on January 31, 2022. The CTR permits trial sponsors to make a single submission to both the competent authority and an ethics committee in each EU Member State, leading to a single decision for each EU Member State. The assessment procedure for the authorization of clinical trials has been harmonized as well, including a joint assessment of some elements of the application by all EU Member States in which the trial is to be conducted, and a separate assessment by each EU Member State with respect to specific requirements related to its own territory, including ethics rules. Each EU Member State’s decision is communicated to the sponsor through a centralized EU portal, the Clinical Trial Information System, or CTIS. The CTR provides a three-year transition period. The extent to which ongoing clinical trials will be governed by the CTR varies. For clinical trials in relation to which an application for approval was made on the basis of the Clinical Trials Directive before January 31, 2023, the CTD will continue to apply on a transitional basis until January 31, 2025. By that date, all ongoing trials will become subject to the provisions of the CTR. The CTR will apply to clinical trials from an earlier date if the related clinical trial application was made on the basis of the CTR or if the clinical trial has already transitioned to the CTR framework before January 31, 2025. In light of the entry into application of the CTR on January 31, 2022, we may be required to transition clinical trials for which we have obtained regulatory approvals in accordance with the CTD to the regulatory framework of the CTR by October 31, 2024. A transitioning application will need to be submitted to the competent authorities of E.U. Member States through the Clinical Trials Information Systems and related regulatory approval obtained to continue the clinical trial past January 30, 2025. This will require financial, technical and human resources. If we are unable to transition our clinical trials in time, the conduct of those clinical trials may be negatively impacted. We cannot predict the likelihood, nature or extent of government regulation that may arise from future legislation or administrative action, either in the United States or abroad. If we are slow or unable to adapt to changes in existing requirements or the adoption of new requirements or policies, or if we are not able to maintain regulatory compliance, we may lose any marketing approval that we may have obtained and we may not achieve or sustain profitability.

If any of these events occurs, our ability to commercialize such product candidate may be impaired, and we may incur substantial additional expense to comply with regulatory requirements, which could adversely affect our business, financial condition and results of operations.

The impact of recent healthcare reform legislation and other changes in the healthcare industry and in healthcare spending on us is currently unknown, and may adversely affect our business model.

In the United States and some foreign jurisdictions, there have been a number of legislative and regulatory changes and proposed changes regarding the healthcare system that could prevent or delay marketing approval of our product candidates, restrict or regulate post-approval activities and affect our ability, or the ability of our collaborators, to profitably sell any products for which we obtain marketing approval. We expect that current laws, as well as other healthcare reform measures that may be adopted in the future, may result in more rigorous coverage criteria and in

88

Table of Contents

additional downward pressure on the price that we, or our collaborators, may receive for any approved products. See “Business – Other U.S. Healthcare Laws.” We cannot predict the initiatives that may be adopted in the future.

The continuing efforts of the government, insurance companies, managed care organizations and other payers of healthcare services to contain or reduce costs of healthcare may adversely affect:

In December 2021, Regulation No 2021/2282 on HTA amending Directive 2011/24/EU, was adopted in the EU. This Regulation, which entered into force in January 2022 and will apply as of January 2025, is intended to boost cooperation among EU Member States in assessing health technologies, including new medicinal products, and providing the basis for cooperation at EU level for joint clinical assessments in these areas. The Regulation foresees a three-year transitional period and will permit EU Member States to use common HTA tools, methodologies, and procedures across the EU, working together in four main areas, including joint clinical assessment of the innovative health technologies with the most potential impact for patients, joint scientific consultations whereby developers can seek advice from HTA authorities, identification of emerging health technologies to identify promising technologies early, and continuing voluntary cooperation in other areas. Individual EU Member States will continue to be responsible for assessing non-clinical (e.g., economic, social, ethical) aspects of health technologies, and making decisions on pricing and reimbursement. If we are unable to maintain favorable pricing and reimbursement status in EU Member States for product candidates that we may successfully develop and for which we may obtain regulatory approval, any anticipated revenue from and growth prospects for those products in the EU could be negatively affected. In light of the fact that the United Kingdom has left the EU, Regulation No 2021/2282 on HTA will not apply in the United Kingdom. However, the UK Medicines and Healthcare products Regulation Agency (“MHRA”) is working with UK HTA bodies and other national organizations, such as the Scottish Medicines Consortium (“SMC”), the National Institute for Health and Care Excellence (“NICE”), and the All-Wales Medicines Strategy Group, to introduce new pathways supporting innovative approaches to the safe, timely and efficient development of medicinal products.

In addition, on April 26, 2023, the European Commission adopted a proposal for a new Directive and Regulation to revise the existing pharmaceutical legislation. If adopted in the form proposed, the recent European Commission proposals to revise the existing EU laws governing authorization of medicinal products may result in a decrease in data and market exclusivity opportunities for our product candidates in the EU and make them open to generic or biosimilar competition earlier than is currently the case with a related reduction in reimbursement status.

Legislative and regulatory proposals have been made to expand post-approval requirements and restrict sales and promotional activities for pharmaceutical and biologic products. We cannot be sure whether additional legislative changes will be enacted, or whether FDA regulations, guidance or interpretations will be changed, or what the impact of such changes on the marketing approvals of our product candidates, if any, may be. In addition, increased scrutiny by Congress of the FDA’s approval process may significantly delay or prevent marketing approval, as well as subject us to more stringent product labeling and post-marketing testing and other requirements. Compliance with new requirements may increase our operational expenses and impose significant administrative burdens. As a result of these and other new proposals, we may need to change our current manner of operation, which could have a material adverse effect on our business, financial condition, and results of operations. Any reduction in reimbursement from Medicare or other government healthcare programs may result in a similar reduction in payments from private payors.

The implementation of cost containment measures or other healthcare reforms may prevent us from being able to generate revenue, attain profitability or commercialize our products. Legislative and regulatory proposals may also

89

Table of Contents

impact our regulatory and commercial prospects, expand post-approval requirements, and restrict sales and promotional activities. We cannot predict the extent to which our business may be affected by these or other potential future legislative or regulatory developments, whether regulations, guidance or interpretations will be changed, or what the impact of such changes on the marketing approvals of our product candidates, if any, may be. Such future price controls or other changes in pricing regulation or negative publicity related to the pricing of pharmaceutical drugs generally could restrict the amount that we are able to charge for our future products, which would adversely affect our anticipated revenue and results of operations. See “Business – U.S. Healthcare Reform.”

We expect that the healthcare reform measures that have been adopted and may be adopted in the future, may result in more rigorous coverage criteria and in additional downward pressure on the price that we receive for any approved product and could seriously harm our future revenues. Any reduction in reimbursement from Medicare or other government programs may result in a similar reduction in payments from private payors. The implementation of cost containment measures or other healthcare reforms may prevent us from being able to generate revenue, attain profitability or commercialize our products.

The FDA or comparable foreign regulatory authorities could require the clearance, CE marking or approval of a companion diagnostic device as a condition of approval for our product candidates. Failure to successfully validate, develop and obtain regulatory clearance or approval for companion diagnostics on a timely basis or at all could harm our drug development strategy.

Our success may depend, in part, on the development and commercialization of companion diagnostic tests to select patients for our drug candidates. If safe and effective use of any of our product candidates depends on an in vitro diagnostic that is not otherwise commercially available, then the FDA generally will require approval or clearance of that diagnostic, known as a companion diagnostic, at the same time that the FDA approves our product candidates. The process of obtaining or creating such diagnostic is time consuming and costly. Foreign regulatory authorities may impose comparable requirements.

Companion diagnostics, which provide information that is essential for the safe and effective use of a corresponding therapeutic product, are subject to regulation by the FDA and comparable foreign regulatory authorities as medical devices and require separate regulatory approval from therapeutic approval prior to commercialization. The FDA previously has required in vitro companion diagnostics intended to select the patients who will respond to a product candidate to obtain pre-market approval (PMA), simultaneously with approval of the therapeutic candidate. The PMA process, including the gathering of preclinical and clinical data and the submission and review by the FDA, can take several years or longer. It involves a rigorous premarket review during which the applicant must prepare and provide FDA with reasonable assurance of the device’s safety and effectiveness and information about the device and its components regarding, among other things, device design, manufacturing, and labeling. After a device is placed on the market, it remains subject to significant regulatory requirements, including requirements governing development, testing, manufacturing, distribution, marketing, promotion, labeling, import, export, record-keeping, and adverse event reporting. We will be subject to additional obligations and regimes with respect to such companion diagnostic tests with regulators outside the United States.

In the EEA, companion diagnostics are deemed to be in vitro diagnostic medical devices, or IVDs, and are governed by Regulation 2017/746, or IVDR, which entered into application on May 26, 2022, repealing and replacing Directive 98/79/EC. The IVDR defines a companion diagnostic as a device which is essential for the safe and effective use of a corresponding medicinal product to: (a) identify, before and/or during treatment, patients who are most likely to benefit from the corresponding medicinal product; or (b) identify, before and/or during treatment, patients likely to be at increased risk of serious adverse reactions as a result of treatment with the corresponding medicinal product. The IVDR and its associated guidance documents and harmonized standards govern, among other things, device design and development, preclinical and clinical or performance testing, premarket conformity assessment, registration and listing, manufacturing, labeling, storage, claims, sales and distribution, export and import and post-market surveillance, vigilance, and market surveillance. IVDs, including companion diagnostics, must conform with the general safety and performance requirements, or GSPR, of the IVDR. Compliance with these requirements is a prerequisite to be able to affix the CE mark to devices, without which they cannot be marketed or sold in the EEA. To demonstrate compliance with the GSPR laid down in Annex I to the IVDR, and obtain the right to affix the CE mark, IVD manufacturers must

90

Table of Contents

conduct a conformity assessment procedure, which varies according to the type of IVD and its classification. Companion diagnostics must undergo a conformity assessment by a Notified Body. Depending on the relevant conformity assessment procedure, the Notified Body audits and examines the technical documentation and the quality system for the manufacture, design and final inspection of the medical devices. The Notified Body issues a CE Certificate of Conformity following successful completion of a conformity assessment procedure conducted in relation to the medical device and its manufacturer and their conformity with the GSPRs. If the related medicinal product has, or is in the process of, been authorized through the centralized procedure for the authorization of medicinal products, the notified body will, before it can issue a CE Certificate of Conformity, be required to seek a scientific opinion from the EMA on the suitability of the companion diagnostic for use in relation to the medicinal product concerned. For medicinal products that have or are in the process of authorization through any other route provided in EU legislation, the Notified Body must seek the opinion of the national competent authority of an EU Member State. The CE Certificate of Conformity and the related conformity assessment process entitles the manufacturer to affix the CE mark to its medical devices after having prepared and signed a related EC Declaration of Conformity.

Given our limited experience in developing and commercializing diagnostics, we do not plan to develop companion diagnostics internally and thus will be dependent on the sustained cooperation and effort of third-party collaborators in developing and obtaining approval for these companion diagnostics. We and our collaborators may encounter difficulties in developing and obtaining approval or CE marking for the companion diagnostics, including issues relating to selectivity/specificity, analytical validation, reproducibility, or clinical validation. Any delay or failure by our collaborators to develop or obtain regulatory approval or CE marking the companion diagnostics could delay or prevent approval of our product candidates. In addition, we, our collaborators or third parties may encounter production difficulties that could constrain the supply of the companion diagnostics, and both they and we may have difficulties gaining acceptance of the use of the companion diagnostics in the medical community. If such companion diagnostics fail to gain market acceptance, it would have an adverse effect on our ability to derive revenues from sales, if any, of any product candidate for which we obtain approval and that requires a companion diagnostic test. In addition, any companion diagnostic collaborator or third party with whom we contract may decide not to commercialize or to discontinue selling or manufacturing the companion diagnostic that we anticipate using in connection with development and commercialization of our product candidates, or our relationship with such collaborator or third party may otherwise terminate. We may not be able to enter into arrangements with another provider to obtain supplies of an alternative diagnostic test for use in connection with the development and commercialization of our product candidates or do so on commercially reasonable terms, which could adversely affect and/or delay the development or commercialization of our product candidates.

We may pursue breakthrough therapy designation from the FDA for our product candidates but such designation may not lead to a faster development or regulatory review or approval process, and it would not increase the likelihood that our product candidates will receive marketing approval.

We may in the future seek breakthrough therapy designation for some of our product candidates. A breakthrough therapy is defined as a drug that is intended, alone or in combination with one or more other drugs, to treat a serious or life-threatening disease or condition, and preliminary clinical evidence indicates that the drug may demonstrate substantial improvement over existing therapies on one or more clinically significant endpoints. For compounds that have been designated as breakthrough therapies, interaction and communication between the FDA and the sponsor of the trial can help to identify the most efficient path for clinical development while minimizing the number of patients placed in ineffective control regimens. Drugs designated as breakthrough therapies by the FDA may also be eligible for accelerated approval.

Designation as a breakthrough therapy is within the discretion of the FDA. Accordingly, even if we believe one of our product candidates meets the criteria for designation as a breakthrough therapy, the FDA may disagree and instead determine not to make such designation. We cannot be sure that any evaluation we may make of our product candidates as qualifying for breakthrough therapy designation will meet the FDA’s expectations. In any event, the receipt of a breakthrough therapy designation for a product candidate may not result in a faster development process, review or approval compared to drugs considered for approval under conventional FDA procedures and does not assure ultimate approval by the FDA. In addition, even if one or more of our product candidates qualify as breakthrough therapies, the

91

Table of Contents

FDA may later decide that such product candidates no longer meet the conditions for qualification or decide that the time period for FDA review or approval will not be shortened.

We may seek Fast Track Designation by the FDA for a product candidate that we develop, and we may be unsuccessful. If we are successful, the designation may not actually lead to a faster development or regulatory review or approval process.

We may seek Fast Track Designation for the product candidates we develop. If a product is intended for the treatment of a serious or life-threatening condition and preclinical or clinical data demonstrate the potential to address an unmet medical need for this condition, the product sponsor may apply for Fast Track Designation. The FDA has broad discretion whether or not to grant this designation, so even if we believe a particular product candidate is eligible for this designation, we cannot assure you that the FDA would decide to grant it. Even if we do receive Fast Track Designation, as we have for HB-200 in combination with pembrolizumab, for the treatment of first-line advanced/metastatic HPV16+ HNSCC, we may not experience a faster development process, review or approval compared to conventional FDA procedures. The FDA may rescind the Fast Track Designation if it believes that the designation is no longer supported by data from our clinical development program.

We may seek Orphan Drug Designation for product candidates we develop, and we may be unsuccessful or may be unable to maintain the benefits associated with Orphan Drug Designation, including the potential for market exclusivity.

As part of our business strategy, we may seek Orphan Drug Designation for any product candidates we develop, and we may be unsuccessful. Regulatory authorities in some jurisdictions, including the United States and the European Union, may designate drugs for relatively small patient populations as orphan drugs. Under the Orphan Drug Act, the FDA may designate a drug as an orphan drug if it is a drug intended to treat a rare disease or condition, which is generally defined as a patient population of fewer than 200,000 individuals annually in the United States, or a patient population greater than 200,000 in the United States where there is no reasonable expectation that the cost of developing the drug will be recovered from sales in the United States. In the United States, Orphan Drug Designation entitles a party to financial incentives such as opportunities for grant funding towards clinical trial costs, tax advantages and user-fee waivers.

Similarly, in Europe, the European Commission may grant orphan designation after receiving the opinion of the EMA Committee for Orphan Medicinal Products on an orphan designation application. Orphan designation is intended to promote the development of drugs that are intended (i) for the diagnosis, prevention or treatment of life-threatening or chronically debilitating conditions, (ii) either the conditions affect no more than 5 in 10,000 persons in the EU or without the benefits derived from orphan status, it is unlikely that sales of the product in the EU would be sufficient to justify the necessary investment in developing the product, and (iii) there exists no satisfactory authorized method of diagnosis, prevention, or treatment of the condition that has been authorized in the EU, or even if such method exists, the product will be of significant benefit to those affected by that condition. In the EU, orphan designation entitles a party to a number of incentives, such as protocol assistance, access to the centralized marketing authorization procedure, and potential fee reductions or waivers depending on the status of the sponsor.

Generally, if a drug with an orphan designation subsequently receives the first marketing approval for the indication for which it has such designation, the drug is entitled to a period of marketing exclusivity, which precludes the FDA from approving another marketing application for the same drug and indication for that time period, except in limited circumstances. Similarly, the EMA cannot accept another marketing authorization application or accept an application to extend for a similar product and the European Commission cannot grant a marketing authorization for the same indication. The applicable period is seven years in the United States and ten years in the EU. The EU exclusivity period can be reduced to six years if, at the end of the fifth year, a drug no longer meets the criteria on the basis of which it received orphan designation, including where it can be demonstrated on the basis of available evidence that the drug is sufficiently profitable such that market exclusivity is no longer justified or where the prevalence of the condition has increased above the threshold.

92

Table of Contents

Even if we obtain orphan drug exclusivity for a product candidate, that exclusivity may not effectively protect the product candidate from competition because different therapies can be approved for the same condition and the same therapies can be approved for different conditions but used off-label. Even after an orphan drug is approved, the FDA can subsequently approve the same drug for the same condition if the FDA concludes that the later drug is clinically superior in that it is shown to be safer, more effective or makes a major contribution to patient care. In addition, a designated orphan drug may not receive orphan drug exclusivity if it is approved for a use that is broader than the indication for which it received orphan designation. Moreover, orphan drug exclusive marketing rights in the United States may be lost if the FDA later determines that the request for designation was materially defective or if the manufacturer is unable to assure sufficient quantity of the drug to meet the needs of patients with the rare disease or condition. Orphan Drug Designation neither shortens the development time or regulatory review time of a drug nor gives the drug any advantage in the regulatory review or approval process. Similar considerations apply abroad. While we may seek Orphan Drug Designation for applicable indications for our current and any future product candidates, we may never receive such designations. Even if we do receive such designations, there is no guarantee that we will enjoy the benefits of those designations.

Our business operations and current and future relationships with investigators, health care professionals, consultants, third-party payors and customers will be subject, directly or indirectly, to federal, state and foreign healthcare fraud and abuse laws, false claims laws, health information privacy and security laws, and other healthcare laws and regulations. If we are unable to comply, or have not fully complied, with such laws, we could face substantial penalties.

Although we do not currently have any products on the market, if we obtain FDA approval for our product candidates, and begin commercializing those products in the United States, our operations may be directly, or indirectly through our prescribers, customers and third-party payors, subject to various U.S. federal and state healthcare laws and regulations, including, without limitation, the U.S. federal Anti-Kickback Statute, the U.S. federal civil and criminal false claims laws, federal health data privacy laws, and the Physician Payments Sunshine Act and regulations. Healthcare providers, physicians and others play a primary role in the recommendation and prescription of any products for which we obtain marketing approval. These laws may impact, among other things, our current business operations, including our clinical research activities, and proposed sales, marketing and education programs and constrain the business of financial arrangements and relationships with healthcare providers, physicians and other parties through which we market, sell and distribute our products for which we obtain marketing approval. In addition, we may be subject to patient data privacy and security regulation by both the U.S. federal government and the states in which we conduct our business. Finally, we may be subject to additional healthcare, statutory and regulatory requirements and enforcement by comparable foreign regulatory authorities in jurisdictions in which we conduct our business that may affect our ability to operate. See “Business – Other U.S. Healthcare Laws.”

The scope and enforcement of each of these laws is uncertain and subject to rapid change in the current environment of healthcare reform, especially in light of the lack of applicable precedent and regulations. Federal and state enforcement bodies have recently increased their scrutiny of interactions between healthcare companies and healthcare providers, which has led to a number of investigations, prosecutions, convictions and settlements in the healthcare industry. Ensuring business arrangements comply with applicable healthcare laws, as well as responding to possible investigations by government authorities, can be time- and resource- consuming and can divert a company’s attention from the business.

Ensuring that our internal operations and future business arrangements with third parties comply with applicable healthcare laws and regulations will involve substantial costs. It is possible that governmental and regulatory authorities will conclude that our business practices do not comply with current or future statutes, regulations, agency guidance or case law involving applicable fraud and abuse or other healthcare laws and regulations. If our operations are found to be in violation of any of the laws described above or any other governmental laws and regulations that may apply to us, we may be subject to significant penalties, including civil, criminal and administrative penalties, damages, fines, exclusion from U.S. government funded healthcare programs, such as Medicare and Medicaid, or similar programs in other countries or jurisdictions, disgorgement, individual imprisonment, contractual damages, reputational harm, diminished profits, additional reporting requirements and oversight if we become subject to a corporate integrity agreement or similar agreement to resolve allegations of non-compliance with these laws and the delay, reduction,

93

Table of Contents

termination or curtailment or restructuring of our operations. Further, defending against any such actions can be costly and time-consuming, and may require significant financial and personnel resources. Therefore, even if we are successful in defending against any such actions that may be brought against us, our business may be impaired. If any of the physicians or other providers or entities with whom we expect to do business is found to not be in compliance with applicable laws, they may be subject to criminal, civil or administrative sanctions, including exclusions from government funded healthcare programs and imprisonment. If any of the above occur, our ability to operate our business and our results of operations could be adversely affected.

Outside the United States, interactions between pharmaceutical companies and health care professionals are also governed by strict laws, such as national anti-bribery laws of European countries, national sunshine rules, regulations, industry self-regulation codes of conduct and physicians’ codes of professional conduct. Failure to comply with these requirements could result in reputational risk, public reprimands, administrative penalties, fines or imprisonment. The provision of benefits or advantages to physicians to induce or encourage the prescription, recommendation, endorsement, purchase, supply, order or use of medicinal products is not permitted in the countries that form part of the European Union. Some European Union Member States, and the United Kingdom, through the United Kingdom Bribery Act 2010, have enacted laws explicitly prohibiting the provision of these types of benefits and advantages. Infringements of these laws can result in substantial fines and imprisonment.

Payments made to physicians in certain European Union Member States (e.g., France or Belgium) must be publicly disclosed. Moreover, agreements with physicians may be the subject of prior notification and approval by the physician’s employer, his or her competent professional organization and/or the regulatory authorities of the individual European Union Member States. These requirements are provided in the European Union Member State national laws, industry codes (e.g. the European Federation of Pharmaceutical Industries and Associations Disclosure and Healthcare Professionals Codes) or professional codes of conduct. Failure to comply with these requirements could result in reputational risk, public reprimands, administrative penalties, fines or imprisonment.

Obtaining and maintaining regulatory approval of our product candidates in one jurisdiction does not mean that we will be successful in obtaining regulatory approval of our product candidates in other jurisdictions.

Obtaining and maintaining regulatory approval of a product candidate in one jurisdiction does not guarantee that we will be able to obtain or maintain regulatory approval for that product candidate in any other jurisdiction, while a failure or delay in obtaining regulatory approval in one jurisdiction may have a negative effect on the regulatory approval process in others. For example, in order to market and sell our drugs in the European Union and many other jurisdictions, we, and any collaborators we may have in the future, must obtain separate marketing approvals and comply with numerous and varying regulatory requirements. The approval procedure varies among countries and can involve additional testing. The time required to obtain approval may differ substantially from that required to obtain FDA approval. The marketing approval process outside of the United States generally includes all of the risks associated with obtaining FDA approval. In addition, in many countries outside of the United States, it is required that the drug be approved for reimbursement before the drug can be approved for sale in that country. In some cases, the price that we intend to charge for our products is also subject to regulatory approval. We, and any collaborators we may have in the future, may not obtain approvals from regulatory authorities outside of the United States on a timely basis, if at all.

European data collection and processing is governed by restrictive regulations governing the use, processing and cross-border transfer of personal information.

The collection, use, storage, disclosure, transfer or other processing of personal data, including personal health data regarding individuals in the EEA is governed by the EU GDPR. The EU GDPR is wide ranging in scope and imposes several requirements on companies that process personal data, including requirements relating to the consent of the individuals to whom the personal data relates, the information provided to the individuals, notification of data processing obligations to the competent national data protection authorities and the security and confidentiality of the personal data. Failure to comply with the requirements of the EU GDPR and the related national data protection laws of the EU Member States may result in fines and other administrative penalties, including potential fines of up to €20 million or 4% of annual global revenues, whichever is greater, for breach or non-compliance.

94

Table of Contents

In addition, further to the UK’s exit from the EU on January 31, 2020, the EU GDPR ceased to apply in the UK at the end of the transition period on December 31, 2020. However, as of January 1, 2021, the UK’s European Union (Withdrawal) Act 2018 incorporated the EU GDPR (as it existed on December 31, 2020 but subject to certain UK specific amendments) into UK law, referred to as the UK GDPR. The UK GDPR and the UK Data Protection Act 2018 set out the UK’s data protection regime, which is independent from but aligned to the EU’s data protection regime. Non-compliance with the UK GDPR may result in monetary penalties of up to £17.5 million or 4% of worldwide revenue, whichever is higher. Although the EU GDPR and the UK GDPR currently impose substantially similar obligations, it is possible that over time the UK GDPR could become less aligned with the EU GDPR. The UK government has announced plans to reform the data protection legal framework in the UK in its Data Protection and Digital Information Bill. The potential misalignment between future UK laws and regulations and EU laws and regulations could add legal risk, uncertainty, complexity and cost to our handling of EU/UK personal information and our privacy and data security compliance programs and could require us to implement different compliance measures for the UK and the EU.

The EU GDPR also imposes strict rules on the transfer of personal data out of the EEA, including to the United States. Although the UK is regarded as a third country under the EU GDPR, the EC has now issued a decision recognizing the UK as providing adequate protection under the EU GDPR and, therefore, transfers of personal data originating in the EU to the UK remain unrestricted. Like the EU GDPR, the UK GDPR restricts personal data transfers outside the UK to countries not regarded by the UK as providing adequate protection. The UK government has confirmed that personal data transfers from the UK to the EEA remain free flowing. To enable the transfer of personal data outside of the EEA or the UK, adequate safeguards must be implemented in compliance with EU and UK data protection laws. There are currently various mechanisms that may be used to transfer personal data from the EEA and UK to the United States in compliance with law, such as the EU’s Standard Contractual Clauses, the UK’s International Data Transfer Agreement / Addendum, and the EU-U.S. Data Privacy Framework and the UK Extension thereto (which allows for transfers for relevant U.S.-based organizations who self-certify compliance and participate in the Framework). However, these mechanisms are subject to legal challenges, and there is no assurance that we can satisfy or rely on these measures to lawfully transfer personal data to the United States.

The EU GDPR and UK GDPR also confer a private right of action on data subjects and consumer associations to lodge complaints with supervisory authorities, seek judicial remedies, and obtain compensation for damages resulting from violations of the EU GDPR and UK GDPR. The EU GDPR and UK GDPR regulations may impose additional responsibility and liability in relation to personal data that we process, and we may be required to put in place additional mechanisms ensuring compliance with these and/or new data protection rules. This may be onerous and adversely affect our business, financial condition, prospects and results of operations. Compliance with the EU GDPR and UK GDPR will be a rigorous and time-intensive process that may increase our cost of doing business or require us to change our business practices, and despite those efforts, there is a risk that we may be subject to fines and penalties, litigation, and reputational harm in connection with our European activities.

Our business activities may be subject to the Foreign Corrupt Practices Act and similar anti-bribery and anti-corruption laws.

Our business activities may be subject to the FCPA and similar anti-bribery or anti-corruption laws, regulations or rules of other countries in which we operate, including the U.K. Bribery Act. The FCPA generally prohibits offering, promising, giving, or authorizing others to give anything of value, either directly or indirectly, to a non-U.S. government official in order to influence official action, or otherwise obtain or retain business. The FCPA also requires public companies to make and keep books and records that accurately and fairly reflect the transactions of the corporation and to devise and maintain an adequate system of internal accounting controls. The anti-bribery provisions of the FCPA are enforced primarily by the Department of Justice (DOJ) and the Securities and Exchange Commission, (SEC) is involved with enforcement of the books and records provisions of the FCPA and may suspend or bar issuers from trading securities on U.S. exchanges for violations of the FCPA’s accounting provisions. Recently the SEC and DOJ have increased their FCPA enforcement activities with respect to pharmaceutical companies. Our business is heavily regulated and therefore involves significant interaction with public officials, including officials of non-U.S. governments. Additionally, in many other countries, the health care providers who prescribe pharmaceuticals are employed by their government, and the purchasers of pharmaceuticals are government entities; therefore, our dealings with these prescribers and purchasers are subject to regulation under the FCPA.

95

Table of Contents

There is no certainty that all of our employees, agents, contractors, or collaborators, or those of our affiliates, will comply with all applicable laws and regulations, particularly given the high level of complexity of these laws. Violations of these laws and regulations could result in fines, criminal sanctions against us, our officers, or our employees, the closing down of our facilities, requirements to obtain export licenses, cessation of business activities in sanctioned countries, implementation of compliance programs, and prohibitions on the conduct of our business. Any such violations could include prohibitions on our ability to offer our products in one or more countries and could materially damage our reputation, our brand, our international expansion efforts, our ability to attract and retain employees, and our business, prospects, operating results, and financial condition.

Our ability to utilize our foreign net operating loss carryforwards may be limited by GILTI taxation introduced through the tax reform.

We have incurred substantial losses during our operating history. We do not anticipate generating revenue from sales of products for the foreseeable future, if ever, and we may never achieve profitability. To the extent that we continue to generate taxable losses, unused losses will carry forward to offset future taxable income, if any, until such unused losses expire. The tax reform legislation introduced section 951A, a new tax on so-called “global intangible low-taxed income,” or GILTI. GILTI applies to income of a controlled foreign corporation (CFC) that is not otherwise subpart F income. Our Austrian subsidiary is expected to be treated as a CFC and GILTI taxation may therefore apply when use of foreign net operating loss carryforwards reduce our foreign income tax to a low level. Tax benefits from the use of our foreign net operating loss carryforwards could be partially offset by U.S. GILTI taxation, which could have an adverse effect on our future results of operations.

Changes to section 174 capitalization rules through the tax reform may impact our ability to immediately deduct research and development expenses, leading to higher taxable income and effective income tax payments even before reaching profitability

The tax reform legislation also altered section 174, by requiring that, beginning with the year 2022, research and development expenses be capitalized and amortized over five years for expenditures incurred in the U.S. and 15 years for expenditures incurred outside the U.S. Therefore, our ability to use research and development expenses to offset revenue in the coming years, may be limited, and we may be required to record taxable income while our business is actually still loss-making. The resulting tax payments could have an adverse effect on our future results of operations.

Risks Related to Our Intellectual Property

Our rights to develop and commercialize our product candidates are subject, in part, to the terms and conditions of licenses granted to us by others, and, if we fail to comply with our obligations under these arrangements or resolve related disputes, we could lose such intellectual property rights or owe damages to the licensor of such intellectual property.

We are dependent on patents, know-how and proprietary technology, both our own and licensed from others. We license patents related to our non-replicating and replicating technologies and certain other intellectual property rights from third parties, including from the University of Geneva, the University of Basel, the University of Zurich and the University of Minnesota and expect in the future to be party to other material license or collaboration agreements. These agreements typically impose numerous obligations, such as diligence and payment obligations, including in relation to revenues we may receive from any sublicenses we grant in respect of the licensed patents. If we fail to comply with our obligations under these agreements, our licensors may have the right to terminate our licenses, in which event we might not be able to develop, manufacture or market any product that is covered by the intellectual property we in-license from such licensor and may face other adverse consequences. These licenses do and future licenses may also include provisions that impose obligations and restrictions on us that could delay or otherwise negatively impact a transaction that we may wish to enter into.

96

Table of Contents

Disputes may also arise between us and our licensors regarding the license agreements we have with them, including with respect to:

If disputes arise that prevent or impair our ability to maintain our current licensing arrangements on acceptable terms, we may be unable to successfully develop and commercialize the affected product candidates.

We are generally also subject to all of the same risks with respect to protection of intellectual property that we license as we are for intellectual property that we own, which are described below. If we or our licensors fail to adequately protect this intellectual property, our ability to commercialize products could suffer.

If our efforts to protect the proprietary nature of the intellectual property related to our technologies are not adequate, we may not be able to compete effectively in our market.

We rely upon a combination of patents, confidentiality agreements, trade secret protection and license agreements to protect the intellectual property related to our technologies. Such means may afford only limited protection of our intellectual property and may not: (i) prevent our competitors from duplicating our technology or product candidates; (ii) prevent our competitors from gaining access to our proprietary technology; or (iii) permit us to gain or maintain a competitive advantage. We face the risk of potential unauthorized disclosure or misappropriation of our intellectual property by the third parties to which we grant access to such intellectual property, which may reduce our trade secret protection and allow our potential competitors to access and exploit our proprietary technology. These third parties also may use our proprietary information and intellectual property in such a way as to invite litigation or other intellectual property-related proceedings that could jeopardize or invalidate our proprietary information and intellectual property. Any disclosure to or misappropriation by third parties of our confidential proprietary information could enable competitors to quickly duplicate or surpass our technological achievements, thus eroding our competitive position in our market.

Our success depends in large part on our ability to obtain and maintain patent protection with respect to our non-replicating technology, our replicating technology, including our HB-200 and HB-700 product candidates, the vaccine product candidates we are developing with Gilead for HBV (HB-400) and HIV (HB-500), and other proprietary product candidates. Although we own or license from others certain patents and patent applications that cover some of the foregoing technologies and product candidates, we do not currently own or license from others issued patents covering all of the foregoing technologies and product candidates. Our reliance on patent applications carries certain risks associated with pending patent applications prior to the issuance of patents, as described below. If we do not adequately obtain and protect our intellectual property rights, competitors may be able to erode, negate or preempt any competitive advantage we may have, which could harm our business and ability to achieve profitability. To protect our proprietary position, we file patent applications in the United States and abroad related to our product candidates that are important to our business. The patent application and approval process is expensive and time-consuming and we may not be able to file and prosecute all necessary or desirable patent applications at a reasonable cost or in a timely manner. We cannot predict:

97

Table of Contents

We cannot be certain that the claims in our pending patent applications covering composition of matter of our product candidates will be considered patentable by the USPTO or by patent offices in foreign countries, or that the claims in any of our issued patents will be considered patentable by courts in the United States or foreign countries. Certain of our issued patents and pending applications are method of use patents, which protect the use of a product for a specified method. This type of patent does not prevent a competitor from making and marketing a product that is identical to our product for an indication that is outside the scope of the patented method. Moreover, even if competitors do not actively promote their product for our targeted indications, physicians may prescribe these products “off-label.” Although off-label prescriptions may induce or contribute to the infringement of method of use patents, the practice is common and such infringement is difficult to prevent or prosecute.

The patent position of biopharmaceutical companies generally is highly uncertain, involves complex legal and factual questions, and has been the subject of much litigation in recent years. As a result, the issuance, scope, validity, enforceability, and commercial value of our patent rights may be uncertain. The patent applications that we own or in-license may fail to result in issued patents with claims that cover our product candidates or uses thereof in the United States or in other foreign countries. Even if patents do successfully issue from such applications, third parties may challenge the validity, enforceability or scope thereof, which may result in such patents being narrowed, invalidated or held unenforceable. If our patents are rendered invalid or unenforceable, or narrowed in scope, the patent coverage afforded our products could be impaired. Such impairment could significantly impede our ability to market our products, negatively affect our competitive position and harm our business and operating results. In addition, changes in either the patent laws or interpretation of the patent laws in the United States and other countries may diminish the value of our patents or narrow the scope of our patent protection. In addition, the laws of foreign countries may not protect our rights to the same extent or in the same manner as the laws of the United States. For example, patent laws in various jurisdictions, including significant commercial markets such as Europe, restrict the patentability of methods of treatment of the human body more than United States law does. Furthermore, even if they are unchallenged, our patents and patent applications may not adequately protect our intellectual property or prevent others from designing around our patent protection. No assurances can be given that third parties will not create new products or methods that achieve similar results without infringing upon patents we own. If these developments were to occur, it could have an adverse effect on our sales or market position. If the breadth or strength of protection provided by the patents and patent applications we hold with respect to our product candidates is threatened, it could dissuade companies from collaborating with us to develop, and threaten our ability to commercialize, our product candidates.

If we enter into additional collaboration agreements and strategic partnerships or license our product candidates, we may not be able to realize the benefit of such transactions if we are unable to successfully integrate them with our existing operations and company culture, which could delay our timelines or otherwise adversely affect our business. We also cannot be certain that, following a strategic transaction or license, we will achieve the revenue or specific net income that justifies such transaction. Any delays in entering into new collaborations or strategic partnership agreements related to our product candidates could delay the development and commercialization of our product candidates in certain geographies for certain indications, which would harm our business prospects.

Given the amount of time required for the development, testing and regulatory review of new product candidates, patents protecting such candidates might expire before or shortly after such candidates are commercialized. Further, if we encounter delays in our clinical trials, the period of time during which we could market our product candidates under patent protection would be reduced. Depending upon the timing, duration and conditions of FDA marketing approval of our product candidates, one or more of our United States patents may be eligible for limited patent term extension under the Drug Price Competition and Patent Term Restoration Act of 1984, referred to as the

98

Table of Contents

Hatch-Waxman Amendments, and similar legislation in the European Union. The Hatch-Waxman Amendments permit a patent term extension of up to five years for a patent covering an approved product as compensation for effective patent term lost during product development and the FDA regulatory review process. A patent term extension cannot extend the remaining term of a patent beyond a total of 14 years from the date of product approval. Only one patent may be extended, and only those claims covering the approved drug, a method for using it, or a method for manufacturing it may be extended. However, we may not receive an extension if we fail to apply within applicable deadlines, fail to apply prior to expiration of relevant patents or otherwise fail to satisfy applicable requirements. Moreover, the length of the extension could be less than we request. If we are unable to obtain patent term extension or the term of any such extension is less than we request, the period during which we can enforce our patent rights for that product will be shortened and our competitors may obtain approval to market competing products sooner. As a result, our revenue from applicable products could be reduced and could have a material adverse effect on our business.

Since patent applications in the United States and most other countries are confidential for a period of time after filing, we cannot be certain that we were the first to file any patent application related to our product candidates. Furthermore, for U.S. applications in which all claims are entitled to a priority date before March 16, 2013, an interference proceeding can be provoked by a third-party or instituted by the USPTO, to determine who was the first to invent any of the subject matter covered by the patent claims of our applications. It is also possible for third parties to file observations with various patent offices during the patent application process. Various post grant review proceedings, such as inter partes review and post grant review in the United States and opposition proceedings at the EPO, are available for any interested third party to challenge the patentability of claims issued in patents to us. Some of these procedures are relatively new and can be unpredictable. For example, the EP ’504 Patent, which is owned by the University of Geneva and is exclusively licensed to us, was opposed by a third-party at the EPO. The Opposition Division of the EPO eventually dismissed the opposition and maintained the patent as granted.

In addition to the protection afforded by patents, we seek to rely on trade secret protection, confidentiality agreements, and license agreements to protect proprietary know-how that is not patentable, processes for which patents are difficult to enforce and any other elements of our product discovery and development processes that involve proprietary know-how, information, or technology that is not covered by patents. Although we require all of our employees to assign their inventions to us, and require all of our employees, consultants, advisors and any third parties who have access to our proprietary know-how, information, or technology to enter into confidentiality agreements, we cannot be certain that our trade secrets and other confidential proprietary information will not be disclosed or that competitors will not otherwise gain access to our trade secrets or independently develop substantially equivalent information and techniques. Furthermore, the laws of some foreign countries do not protect proprietary rights to the same extent or in the same manner as the laws of the United States. As a result, we may encounter significant problems in protecting and defending our intellectual property both in the United States and abroad. If we are unable to prevent unauthorized material disclosure of our intellectual property to third parties, we will not be able to establish or maintain a competitive advantage in our market, which could materially adversely affect our business, operating results and financial condition.

Third-party claims of intellectual property infringement may prevent or delay our product discovery and development efforts.

Our commercial success depends in part on our avoiding infringement of the patents and proprietary rights of third parties. There is a substantial amount of litigation involving patents and other intellectual property rights in the biotechnology and pharmaceutical industries, as well as administrative proceedings for challenging patents, including interference, reexamination, inter partes review and post grant review proceedings before the USPTO or oppositions and other comparable proceedings in foreign jurisdictions. Numerous U.S. and foreign issued patents and pending patent applications, which are owned by third parties, exist in the fields in which we are developing our product candidates. As the biotechnology and pharmaceutical industries expand and more patents are issued, the risk increases that our product candidates may give rise to claims of infringement of the patent rights of others.

Third parties may assert that we are employing their proprietary technology without authorization. Generally, conducting clinical trials and certain other development activities in the United States is not considered an act of infringement. If and when any of our product candidates are approved by the FDA, a third party may then seek to

99

Table of Contents

enforce its patent by filing a patent infringement lawsuit against us. While we are aware of certain third-party patents and applications that relate to similar subject matter as our technologies, we do not believe that any patent claims that could otherwise materially adversely affect commercialization of our product candidates, if approved, are valid and enforceable. We may be incorrect in this belief, or we may not be able to prove it in a litigation. In this regard, patents issued in the United States by law enjoy a presumption of validity that can be rebutted only with evidence that is “clear and convincing,” a heightened standard of proof. There may be third-party patents of which we are currently unaware which cover materials, formulations, methods of manufacture or methods for treatment related to the use or manufacture of our product candidates. Because patent applications can take many years to issue, there may be currently pending patent applications which may later result in issued patents that our product candidates may infringe. In addition, third parties may obtain patents in the future and claim that use of our technologies infringes upon these patents. Moreover, we may fail to identify relevant patents or incorrectly conclude that a patent is invalid, not enforceable, exhausted, or not infringed by our activities. If any third-party patents were held by a court of competent jurisdiction to cover the manufacturing process of our product candidates, constructs or molecules used in or formed during the manufacturing process, or any final product itself, the holders of any such patents may be able to block our ability to commercialize the product candidate unless we obtained a license under the applicable patents, or until such patents expire or they are determined to be held invalid or unenforceable. Similarly, if any third-party patent were held by a court of competent jurisdiction to cover aspects of our formulations, processes for manufacture or methods of use, including combination therapy or patient selection methods, the holders of any such patent may be able to block our ability to develop and commercialize the product candidate unless we obtained a license, which may not be available on commercially reasonable terms, if at all, or until such patent expires or is determined to be invalid or unenforceable. If we are unable to obtain a necessary license to a third-party patent on commercially reasonable terms, or at all, our ability to commercialize our product candidates may be impaired or delayed, which could in turn significantly harm our business.

Parties making claims against us may seek and obtain injunctive or other equitable relief, which could effectively block our ability to further develop and commercialize our product candidates. Defense of these claims, regardless of their merit, could involve substantial litigation expense and would be a substantial diversion of employee resources from our business. In the event of a successful claim of infringement against us, we may have to pay substantial damages, including treble damages and attorneys’ fees for willful infringement, obtain one or more licenses from third parties, pay royalties or redesign our infringing products, which may be impossible or require substantial time and monetary expenditure. We cannot predict whether any such license would be available at all or whether it would be available on commercially reasonable terms. Furthermore, even in the absence of litigation, we may need or may choose to obtain licenses from third parties to advance our research or allow commercialization of our product candidates. We may fail to obtain any of these licenses at a reasonable cost or on reasonable terms, if at all. In that event, we would be unable to further develop and commercialize our product candidates, which could harm our business significantly.

We may not be successful in obtaining or maintaining necessary rights to product components and processes for our development pipeline through acquisitions and in-licenses.

Presently we have rights to certain intellectual property, through licenses from third parties and under patents and/or patent applications that we own or will own, related to HB-200, HB-700, HB-400, HB-500 and certain other product candidates. Because additional product candidates may require the use of proprietary rights held by third parties, such as the rights to use certain antigens that are, specific to future disease targets, the growth of our business will likely depend in part on our ability to acquire, in-license or use these proprietary rights. In addition, while we have patent rights directed to certain non-replicating and replicating technologies we may not be able to obtain intellectual property to all uses of non-replicating and replicating technologies. Our product candidates may also require specific formulations to work effectively and efficiently and rights to such formulations may be held by others. Similarly, efficient production or delivery of our product candidates may also require specific compositions or methods, and the rights to these compositions or methods may be owned by third parties. We may be unable to acquire or in-license any compositions, methods of use, processes or other third-party intellectual property rights from third parties that we identify. Even if we are able to obtain a license to use such intellectual property, it may be non-exclusive, which would not restrict the licensor party from giving our competitors access to the same technologies licensed to us. In that event, we may be required to expend significant time and resources to develop or license replacement technology. Moreover, the specific antigens that will be used with our product candidates may be covered by the intellectual property rights of others.

100

Table of Contents

The licensing and acquisition of third-party intellectual property rights is a competitive area, and companies, which may be more established, or have greater resources than we do, may also be pursuing strategies to license or acquire third-party intellectual property rights that we may consider necessary or attractive in order to commercialize our product candidates. More established companies may have a competitive advantage over us due to their size, cash resources and greater clinical development and commercialization capabilities.

We may be involved in lawsuits to protect or enforce our patents or the patents of our licensors, which could be expensive, time-consuming and unsuccessful.

Competitors may infringe our patents or the patents of our licensors. To counter infringement or unauthorized use, we may be required to file infringement claims, which can be expensive and time-consuming. In addition, in an infringement proceeding, a court may decide that one or more of our patents is not valid or is unenforceable, or may refuse to stop the other party from using the technology at issue on the grounds that our patents do not cover the technology in question. An adverse result in any litigation or defense proceedings could put one or more of our patents at risk of being invalidated, held unenforceable, or interpreted narrowly and could put our patent applications at risk of not issuing. Defense of these claims, regardless of their merit, would involve substantial litigation expense and would be a substantial diversion of employee resources from our business. In the event of a successful claim of infringement against us, we may have to pay substantial damages, including treble damages and attorneys’ fees for willful infringement, obtain one or more licenses from third parties, pay royalties or redesign our infringing products, which may be impossible or require substantial time and monetary expenditure.

For certain of our in-licensed patent rights, such as patent rights in-licensed from the University of Geneva, the University of Basel and the University of Zurich, we may not have the right to file a lawsuit for infringement and may have to rely on a licensor to enforce these rights for us. If we are not able to directly assert our licensed patent rights against infringers or if a licensor does not vigorously prosecute any infringement claims on our behalf, we may have difficulty competing in certain markets where such potential infringers conduct their business, and our commercialization efforts may suffer as a result.

Post-grant proceedings, including interference proceedings, provoked by third parties or brought by the USPTO may be necessary to determine the validity or priority of inventions with respect to our patents or those of our licensors. An unfavorable outcome could result in a loss of our current patent rights and could require us to cease using the related technology or to attempt to license rights to it from the prevailing party. Our business could be harmed if the prevailing party does not agree to a license on commercially reasonable terms or at all. Litigation or post-grant proceedings may result in a decision adverse to our interests and, even if we are successful, may result in substantial costs and distract our management and other employees. We may not be able to prevent, alone or with our licensors, misappropriation of our trade secrets or confidential information, particularly in countries where the laws may not protect those rights as fully as in the United States.

Furthermore, because of the substantial amount of discovery required in connection with intellectual property litigation, there is a risk that some of our confidential information could be compromised by disclosure during this type of litigation. In addition, there could be public announcements of the results of hearings, motions or other interim proceedings or developments. If securities analysts or investors perceive these results to be negative, it could have a substantial adverse effect on the price of our common stock.

Obtaining and maintaining our patent protection depends on compliance with various procedural, document submission, fee payment and other requirements imposed by governmental patent agencies, and our patent protection could be reduced or eliminated for non-compliance with these requirements.

Periodic maintenance fees, renewal fees, annuity fees and various other government fees on patents and/or patent applications will be due to be paid to the USPTO and foreign patent agencies in several stages over the lifetime of our patents and/or patent applications and any patent rights we may obtain in the future. The USPTO and various foreign governmental patent agencies require compliance with a number of procedural, documentary, fee payment and other similar provisions during the patent application process. While an inadvertent lapse can in many cases be cured by payment of a late fee or by other means in accordance with the applicable rules, there are situations in which

101

Table of Contents

noncompliance can result in abandonment or lapse of the patent or patent application, resulting in partial or complete loss of patent rights in the relevant jurisdiction. Noncompliance events that could result in abandonment or lapse of a patent or patent application include, but are not limited to, failure to respond to official actions within prescribed time limits, non-payment of fees and failure to properly legalize and submit formal documents. In such an event, our competitors might be able to enter the market, which would have a material adverse effect on our business.

Issued patents covering our product candidates could be found invalid or unenforceable if challenged in court or the USPTO.

If we or one of our licensing partners initiate legal proceedings against a third party to enforce a patent covering one of our product candidates, the defendant could counterclaim that such patent is invalid and/or unenforceable. In patent litigation in the United States, defendant counterclaims alleging invalidity and/or unenforceability are commonplace, and there are numerous grounds upon which a third party can assert invalidity or unenforceability of a patent. Third parties may also raise similar claims before administrative bodies in the United States or abroad, even outside the context of litigation. Such mechanisms include re-examination, inter partes review, post grant review, and equivalent proceedings in foreign jurisdictions (e.g., opposition proceedings). Such proceedings could result in revocation or amendment to our patents in such a way that they no longer cover our product candidates. The outcome following legal assertions of invalidity and unenforceability is unpredictable. With respect to the validity question, for example, we cannot be certain that there is no invalidating prior art, of which we, our patent counsel and the patent examiner were unaware during prosecution. If a defendant were to prevail on a legal assertion of invalidity and/or unenforceability, we would lose at least part, and perhaps all, of the patent protection on our product candidate. Such a loss of patent protection could have a material adverse impact on our business.

Changes in U.S. patent law could diminish the value of patents in general, thereby impairing our ability to protect our products.

As is the case with other biopharmaceutical companies, our success is heavily dependent on intellectual property, particularly patents. Obtaining and enforcing patents in the biotechnology or pharmaceutical industry involve both technological and legal complexity, and is therefore costly, time-consuming and inherently uncertain. In addition, the United States continues to adapt to wide-ranging patent reform legislation that became effective starting in 2012. Moreover, recent U.S. Supreme Court rulings have narrowed the scope of patent protection available in certain circumstances and weakened the rights of patent owners in certain situations. In addition to increasing uncertainty with regard to our ability to obtain patents in the future, this combination of events has created uncertainty with respect to the value of patents, once obtained. Furthermore, the specific content of patents and patent applications that are necessary to support and interpret patent scope is highly uncertain due to the complex nature of the relevant legal, scientific, and factual issues. Changes in either patent laws or interpretations of patent laws in the United States and other countries may diminish the value of our intellectual property or narrow the scope of our patent protection. Depending on decisions by the U.S. Congress, the federal courts, and the USPTO, the laws and regulations governing patents could change in unpredictable ways that would weaken our ability to obtain new patents or to enforce our existing patents and patents that we might obtain in the future. Changes in the laws and regulations governing patents in other jurisdictions could similarly have an adverse effect on our ability to obtain and effectively enforce our patent rights.

For example, the Biden administration recently indicated its support for a proposal at the World Trade Organization to waive patent rights with respect to COVID-19 vaccines. Any waiver of our patent or other intellectual property protection by the U.S. and other foreign governments could have a material adverse effect on our competitive position, business, financial condition and results of operations. For example, recent decisions raise questions regarding the award of patent term adjustment (PTA) for patents in families where related patents have been issued without PTA. Thus, it cannot be said with certainty how PTA will or will not be viewed in the future and whether patent expiration dates may be impacted. In addition, the European patent system is relatively stringent in the type of amendments that are allowed during prosecution, but, the complexity and uncertainty of European patent laws has also increased in recent years. For example, in Europe, a new unitary patent system took effect June 1, 2023, which will significantly impact European patents, including those granted before the introduction of such a system. Under the unitary patent system, European applications have the option, upon grant of a patent, of becoming a Unitary Patent which will be subject to the jurisdiction of the Unitary Patent Court (UPC). As the UPC is a new court system, there is no precedent for the court,

102

Table of Contents

increasing the uncertainty of any litigation. Patents granted before the implementation of the UPC have the option of opting out of the jurisdiction of the UPC and remaining as national patents in the UPC countries. Patents that remain under the jurisdiction of the UPC will be potentially vulnerable to a single UPC-based revocation challenge that, if successful, could invalidate the patent in all countries who are signatories to the UPC. We cannot predict with certainty the long-term effects of any potential changes. Complying with these laws and regulations could limit our ability to obtain new patents in the future that may be important for our business.

We have less robust intellectual property rights in certain foreign jurisdictions and may not be able to protect our intellectual property rights throughout the world.

Certain of our key patent families have been filed in the United States, as well as in numerous jurisdictions outside the United States. However, our intellectual property rights in certain jurisdictions outside the United States may be less robust. Filing, prosecuting and defending patents on product candidates in all countries throughout the world would be prohibitively expensive. In addition, the laws of some foreign countries do not protect intellectual property rights to the same extent as federal and state laws in the United States. Consequently, we may not be able to prevent third parties from practicing our inventions in certain countries outside the United States, or from selling or importing products made using our inventions in and into the United States or other jurisdictions. Competitors may use our technologies in jurisdictions where we have not obtained patent protection to develop their own products and may export otherwise infringing products to territories where we have patent protection. These products may compete with our products and our patents or other intellectual property rights may not be effective or sufficient to prevent them from competing. A portion of our patent portfolio is at the very early stage. We will need to decide whether and in which jurisdictions to pursue protection for the various inventions in our portfolio prior to applicable deadlines.

Many companies have encountered significant problems in protecting and defending intellectual property rights in foreign jurisdictions. The legal systems of certain countries, particularly certain developing countries, do not favor the enforcement of patents, trade secrets and other intellectual property protection, particularly those relating to biopharmaceutical products, which could make it difficult for us to stop the infringement of our patents or marketing of competing products in violation of our proprietary rights generally. Proceedings to enforce our patent rights in foreign jurisdictions could result in substantial costs and divert our efforts and attention from other aspects of our business, could put our patents at risk of being invalidated or interpreted narrowly and our patent applications at risk of not issuing and could provoke third parties to assert claims against us. We may not prevail in any lawsuits that we initiate and the damages or other remedies awarded, if any, may not be commercially meaningful. Accordingly, our efforts to enforce our intellectual property rights around the world may be inadequate to obtain a significant commercial advantage from the intellectual property that we develop or license.

We may be subject to claims challenging the inventorship or ownership of our patents and other intellectual property.

We generally enter into confidentiality and intellectual property assignment agreements with our employees, consultants, and contractors. These agreements generally provide that inventions conceived by an employee, consultant, or contractor, as applicable, in the course of rendering services to us will be our exclusive property. However, those agreements may not be honored and may not effectively assign intellectual property rights to us. We may face claims by third parties that our agreements with employees, contractors or consultants obligating them to assign intellectual property to us are ineffective or in conflict with prior or competing contractual obligations of assignment, which could result in ownership disputes regarding intellectual property we have developed or will develop and interfere with our ability to capture the commercial value of such intellectual property. Moreover, there may be some circumstances, where we are unable to negotiate for such ownership rights. Disputes regarding ownership or inventorship of intellectual property can also arise in other contexts, such as collaborations and sponsored research. We may be subject to claims that former collaborators or other third parties have an ownership interest in our patents or other intellectual property, including our in-licensed patent rights. If we are subject to a dispute challenging our rights in or to patents or other intellectual property, such a dispute could be expensive and time-consuming. If we are unsuccessful, we could lose valuable rights in intellectual property that we regard as our own.

103

Table of Contents

We may be subject to claims that our employees, consultants or contractors have wrongfully used or disclosed confidential information of third parties.

We have received confidential and proprietary information from third parties. In addition, we employ individuals who were previously employed at other biotechnology or pharmaceutical companies. We may be subject to claims that we or our employees, consultants or contractors have inadvertently or otherwise used or disclosed confidential information of these third parties or our employees’ former employers or our consultants’ or contractors’ current or former clients or customers. Litigation may be necessary to defend against these claims. Even if we are successful in defending against these claims, litigation could result in substantial cost and be a distraction to our management and employees from their normal responsibilities. If we are not successful, in addition to paying monetary damages, we could lose access or exclusive access to valuable intellectual property and personnel.

Numerous factors may limit any potential competitive advantage provided by our intellectual property rights.

The degree of future protection afforded by our intellectual property rights, whether owned or in-licensed, is uncertain because intellectual property rights have limitations, and may not adequately protect our business, provide a barrier to entry against our competitors or potential competitors, or permit us to maintain our competitive advantage. Moreover, if a third party has intellectual property rights that cover the practice of our technologies, we may not be able to fully exercise or extract value from our intellectual property rights. The following examples are illustrative:

Should any of these events occur, they could significantly harm our business and results of operation.

104

Table of Contents

Risks Related to Employee Matters, Managing Our Growth and Other Risks

The contractual obligations of Daniel Pinschewer to the University of Basel may present conflicts of interest.

Daniel Pinschewer, M.D., Founder and Chief Scientific Officer until March 2020, who serves as our Scientific Advisor to the Chief Executive Officer, provides research services to us pursuant to a consulting agreement. Dr. Pinschewer is also an employee of the University of Basel where he engages in, among other activities, academic research related to arenaviruses and our technology platform. Pursuant to a separate research service agreement with the University of Basel, the university provides us with on-going services with respect to our technologies, and employs the services of Dr. Pinschewer to perform some of these services. As an employee of the University of Basel, Dr. Pinschewer is subject to the university’s rules of conduct, such as confidentiality, academic objectivity and transparency of research with respect to his academic research. As a result of Dr. Pinschewer’s obligations to the University of Basel and his current role as our Scientific Advisor to the Chief Executive Officer, circumstances may arise that could create or appear to create conflicts of interest when, we, the University of Basel or Dr. Pinschewer are faced with decisions that could have different implications for the University of Basel and our company. Additionally, we would not automatically obtain rights to inventions that are developed by Dr. Pinschewer unless the inventions were made in the course of his consulting services to us. Furthermore, other research being conducted by the University of Basel may receive higher priority than research and services related to our technology platform. Any potential disagreement or dispute that may arise with the University of Basel relating to the ownership of Dr. Pinschewer’s inventions, conflicts of interest or otherwise may result in a delay or termination of the research, development or commercialization of our product candidates or may have other negative consequences for our company.

We are highly dependent on our key personnel, and if we are not successful in attracting and retaining highly qualified personnel, we may not be able to successfully implement our business strategy.

We are highly dependent on members of our executive team, including our Chief Executive Officer, Joern Aldag. Although we have formal employment agreements with our executive officers, any of our executive officers could leave our employment at any time, or within a contractual termination period that is too short to find an adequate replacement. We currently do not have “key person” insurance on any of our employees. The loss of the services of our executive officers or other key employees may adversely impact the achievement of our research, development and commercialization objectives and seriously harm our ability to successfully implement our business strategy.

Recruiting and retaining qualified employees, consultants and advisors for our business, including scientific and technical personnel, also will be critical to our success. We primarily conduct our operations at our facility in Vienna, Austria. This region is headquarters to many other biopharmaceutical companies and many academic and research institutions. Competition for skilled personnel is intense and the turnover rate can be high. We may not be able to attract and retain personnel on acceptable terms given the competition among numerous biotechnology and pharmaceutical companies and academic institutions for skilled individuals. In addition, failure to succeed in preclinical studies, clinical trials or applications for marketing approval may make it more challenging to recruit and retain qualified personnel.

To induce valuable employees to join and remain at our company, in addition to salary and cash incentives, we have provided, and intend to continue to provide, stock options that vest over time. The value of these equity grants that vest over time to our employees may be significantly affected by movements in the fair market value of our capital stock that are beyond our control, and may at any time be insufficient to counteract more lucrative offers from other companies.

Moreover, many of our employees have become or will soon become vested in a substantial amount of our common stock or a number of common stock options. Our employees may be more likely to leave us if the shares they own have significantly appreciated in value relative to the original purchase prices of the shares, or if the exercise prices of the options that they hold are significantly below the market price of our common stock.

Accordingly, our future success depends on our ability to continue to attract and retain current and additional executive officers and other key employees. The inability to recruit, or the loss of services of certain executives, key

105

Table of Contents

employees, consultants or advisors, may impede the progress of our research, development and commercialization objectives and have a material adverse effect on our business, financial condition, results of operations and prospects.

Our strategic refocus and the associated workforce reduction announced in January 2024 may not result in anticipated cost savings, could result in total costs and expenses that are greater than expected and could disrupt our business.

In January 2024, we announced a reduction in workforce by approximately 30% in connection with the strategic refocus of our business to prioritize and focus on our lead assets. We may not realize, in full or in part, the anticipated benefits, savings and improvements in our operating structure from our restructuring efforts due to unforeseen difficulties, delays or unexpected costs. If we are unable to realize the expected operational efficiencies and cost savings from the restructuring, our results of operation and financial condition would be adversely affected. We expect to incur additional costs as we recognize one-time employee termination-related charges. We also cannot guarantee that we will not have to undertake additional workforce reductions or restructuring activities in the future. Furthermore, our strategic Restructuring Plan may be disruptive to our operations. For example, our workforce reductions could yield unanticipated consequences, such as attrition beyond planned staff reductions, increased difficulties in our day-to-day operations and reduced employee morale. If employees who were not affected by the reduction in force seek alternate employment, this could result in us seeking contract support which may result in unplanned additional expense or harm our productivity. Our workforce reductions could also harm our ability to attract and retain qualified management, scientific, and clinical personnel who are critical to our business. Any failure to attract or retain qualified personnel could prevent us from successfully developing our product candidates in the future.

We may need to grow or contract our organization, and we may experience difficulties in managing this growth or contraction, which could disrupt our operations.

In addition to the risks associated with a reduction in force, as our finances, development and commercialization plans and strategies evolve, we may choose to expand or contract our employee base for managerial, operational, manufacturing, financial and other resources. Future growth or additional contraction would impose significant added responsibilities on members of management, including the need to identify, recruit, maintain, motivate and integrate additional employees. Also, our management may need to divert a disproportionate amount of their attention away from our day-to-day activities and devote a substantial amount of time to managing either growth or contraction activities. We may not be able to effectively manage our operations which may result in weaknesses in our infrastructure, give rise to operational errors, loss of business opportunities, loss of employees and reduced productivity among remaining employees.

Growth could require significant capital expenditures and may divert financial resources from other projects, such as the development of existing and additional product candidates. If our management is unable to effectively manage such growth, our expenses may increase more than expected, our ability to generate and/or grow revenue could be reduced and we may not be able to implement our business strategy. Our future financial performance and our ability to commercialize our product candidates and compete effectively with others in our industry will depend, in part, on our ability to effectively manage any such growth.

We will need to grow the size of our organization, and we may experience difficulties in managing this growth.

Although we recently implemented an approximately 30% reduction in our workforce and discontinued our GMP manufacturing facility project as part of our recent strategic refocus, as our research, development and commercialization plans and strategies develop, we expect to need additional managerial, operational, sales, marketing, financial and other personnel, as well as additional facilities to expand our operations. Future growth would impose significant added responsibilities on members of management, including:

106

Table of Contents

Our future financial performance and our ability to commercialize our product candidates will depend, in part, on our ability to effectively manage any future growth, and our management may also have to divert a disproportionate amount of its attention away from day-to-day activities in order to devote a substantial amount of time to managing these growth activities. Due to our limited financial resources and the limited experience of some members of our management team in managing a public company, we may not be able to effectively manage the expansion of our operations or recruit and train additional qualified personnel. The physical expansion of our operations may also lead to significant costs. If we are not able to effectively expand our organization by hiring new employees and expanding our groups of consultants and contractors, or we are not able to effectively build out new facilities to accommodate this expansion, we may not be able to successfully implement the tasks necessary to further develop and commercialize our product candidates and, accordingly, may not achieve our research, development and commercialization goals.

We currently rely, and for the foreseeable future will continue to rely, in substantial part on certain independent organizations, advisors and consultants to provide certain services, including substantially all aspects of regulatory approval, clinical trial management and manufacturing. Our independent organizations, advisors and consultants may be employed by employers other than us and may have commitments under consulting or advisory contracts with other entities. There can be no assurance that the services of independent organizations, advisors and consultants will continue to be available to us on a timely basis when needed, or that we can find qualified replacements. In addition, if we are unable to effectively manage our outsourced activities or if the quality or accuracy of the services provided by consultants is compromised for any reason, our clinical trials may be extended, delayed or terminated, and we may not be able to obtain regulatory approval of our product candidates or otherwise advance our business. There can be no assurance that we will be able to manage our existing consultants or find other competent outside contractors and consultants on economically reasonable terms, or at all.

Risks Related to Ownership of Our Common Stock

An active trading market for our common stock may not be sustainable, and you may not be able to resell your shares of our common stock at or above the purchase price.

An active trading market for our shares may not be sustained. You may not be able to sell your shares quickly or at the market price if trading in shares of our common stock is not active. As a result of these and other factors, it may be difficult for our stockholders to resell their shares of our common stock at or above the prices at which they acquired their shares or sell their shares at the time they would like to sell. Further, an inactive market may also impair our ability to raise capital by selling shares of our common stock and may impair our ability to enter into strategic partnerships or acquire companies or products by using our shares of common stock as consideration.

Our failure to meet the continued listing requirements of The Nasdaq Capital Market could result in a delisting of our common stock.

If we fail to satisfy the continued listing requirements of The Nasdaq Capital Market, such as the minimum closing bid price requirement, The Nasdaq Stock Market, LLC (Nasdaq) may take steps to delist our common stock. Under Nasdaq rules, the closing bid price for our common stock must remain at or above $1.00 per share to comply with Nasdaq’s minimum bid requirement for continued listing.

On August 3, 2023, we received a letter from the Listing Qualifications Department of Nasdaq notifying us that, for the last 30 consecutive business days, the closing bid price for our common stock has been below the minimum $1.00 per share required for continued listing on The Nasdaq Global Select Market pursuant to Nasdaq Listing Rule 5450(a)(1) (the Minimum Bid Price Requirement). Under Nasdaq Listing Rule 5810(c)(3)(A), we have been granted a 180 calendar day grace period, or until January 30, 2024, to regain compliance with the Minimum Bid Price

107

Table of Contents

Requirement. The Minimum Bid Price Requirement will be met if our common stock has a minimum closing bid price of at least $1.00 per share for a minimum of ten consecutive business days during the 180 calendar day grace period. However, we failed to regain compliance prior to January 30, 2024. Accordingly, on January 18, 2024, we applied for and on January 31, 2024 were granted by the Listing Qualifications Department of Nasdaq the right to list our common stock on the Capital Market and to have an additional 180 calendar days, or until June 29, 2024, to regain compliance with the Minimum Bid Price Requirement.

We are monitoring the closing bid price of our common stock; however, there can be no assurance that we will be able to regain compliance with the Minimum Bid Price Requirement.

The delisting of our common stock from Nasdaq may make it more difficult for us to raise capital on favorable terms in the future. Such a delisting would likely have a negative effect on the price of our common stock and would impair your ability to sell or purchase our common stock when you wish to do so. Further, if we were to be delisted from Nasdaq, our common stock would cease to be recognized as covered securities and we would be subject to regulation in each state in which we offer our securities. Moreover, there is no assurance that any actions that we take to restore our compliance with the Minimum Bid Price Requirement would stabilize the market price or improve the liquidity of our common stock, prevent our common stock from falling below the minimum bid price required for continued listing again or prevent future non-compliance with Nasdaq’s listing requirements.

The price of our stock may be volatile.

The trading price of our common stock could be subject to wide fluctuations in response to various factors, some of which are beyond our control, including limited trading volume. The market price for our common stock may be influenced by many factors, including:

108

Table of Contents

In addition, the stock market in general, and Nasdaq and biopharmaceutical companies in particular, have experienced extreme price and volume fluctuations that have often been unrelated or disproportionate to the operating performance of these companies. Broad market and industry factors may negatively affect the market price of our common stock, regardless of our actual operating performance. In the past, securities class action litigation has often been instituted against companies following periods of volatility in the market price of a company’s securities. This type of litigation, if instituted, could result in substantial costs and a diversion of management’s attention and resources, which would harm our business, operating results or financial condition.

109

Table of Contents

Our principal stockholders and management own a significant percentage of our stock and exert significant influence over matters subject to stockholder approval.

Our Class A common stock has no voting rights. As a result, all matters submitted to our stockholders are decided by the vote of holders of our common stock. Our executive officers, directors, and 5% stockholders beneficially own approximately 40% of our outstanding voting stock. These stockholders may be able to determine many matters requiring stockholder approval. For example, these stockholders may be able to control elections of directors, amendments of our organizational documents, or approval of any merger, sale of assets, or other major corporate transaction. This may prevent or discourage unsolicited acquisition proposals or offers for our common stock.

Our operating results may fluctuate significantly, which makes our future operating results difficult to predict and could cause our operating results to fall below expectations or our guidance.

Our quarterly and annual operating results may fluctuate significantly in the future, which makes it difficult for us to predict our future operating results. From time to time, we may enter into license or collaboration agreements with other companies that include development funding and significant upfront and milestone payments and/or royalties, which may become an important source of our revenue. Accordingly, our revenue may depend on development funding and the achievement of development and clinical milestones under current and any potential future license and collaboration agreements and, if approved, sales of our product candidates. These upfront and milestone payments may vary significantly from period to period and any variance could cause a significant fluctuation in our operating results from one period to the next.

Further, our operating results may fluctuate due to a variety of other factors, many of which are outside of our control and may be difficult to predict, including the following:

The cumulative effect of these factors could result in large fluctuations and unpredictability in our quarterly and annual operating results. As a result, comparing our operating results on a period-to-period basis may not be meaningful. Investors should not rely on our past results as an indication of our future performance. This variability and unpredictability could also result in our failing to meet the expectations of industry or financial analysts or investors for any period. If our revenue or operating results fall below the expectations of analysts or investors or below any forecasts we may provide to the market, or if the forecasts we provide to the market are below the expectations of analysts or investors, the price of our common stock could decline substantially. The price of our common stock could decline even when we have met any previously publicly stated revenue and/or earnings guidance we may provide.

110

Table of Contents

We expect to continue to incur significant increased costs as a result of operating as a public company, and our management is required to devote substantial time to new compliance initiatives.

As a public company, and particularly after we are no longer an emerging growth company, as defined in the JOBS Act, we will incur significant legal, accounting and other expenses that we did not incur as a private company. Our status as an “emerging growth company” will end on December 31, 2024, at the latest. The Sarbanes-Oxley Act, the Dodd-Frank Wall Street Reform and Consumer Protection Act, the listing requirements of Nasdaq and other applicable securities rules and regulations impose various requirements on public companies, including establishment and maintenance of effective disclosure and financial controls and corporate governance practices. We expect that we will continue to need to hire additional accounting, finance, and other personnel in connection with our efforts to comply with the requirements of being, a public company and our management and other personnel will need to devote a substantial amount of time towards maintaining compliance with these requirements. These requirements will continue to increase our legal and financial compliance costs and will make some activities more time-consuming and costly. We are continuously evaluating these rules and regulations which are often subject to varying interpretations, in many cases due to their lack of specificity, and, as a result, their application in practice may evolve over time as new guidance is provided by regulatory and governing bodies. This could result in continuing uncertainty regarding compliance matters and higher costs necessitated by ongoing revisions to disclosure and governance practices.

Pursuant to Section 404 of the Sarbanes-Oxley Act (SOX Section 404) we are required to furnish a report by our management on our internal control over financial reporting with our Annual Report on Form 10-K with the SEC. However, while we remain an emerging growth company, we will not be required to include an attestation report on internal control over financial reporting issued by our independent registered public accounting firm. After no longer qualifying as an emerging growth company, we may, under certain conditions, still qualify as a “smaller reporting company” and benefit from similar exemptions from disclosure requirements, including not being required to comply with the auditor attestation requirements of Section 404 of the Sarbanes-Oxley Act and reduced disclosure obligations regarding executive compensation in our periodic reports and proxy statements. To achieve compliance with SOX Section 404 within the prescribed period, we will be engaged in a process to document and evaluate our internal control over financial reporting, which is both costly and challenging. In this regard, we will need to continue to dedicate internal resources, potentially engage outside consultants and adopt a detailed work plan to assess and document the adequacy of internal control over financial reporting, continue steps to improve control processes as appropriate, validate through testing that controls are functioning as documented and implement a continuous reporting and improvement process for internal control over financial reporting. Despite our efforts, there is a risk that we will not be able to conclude, within the prescribed timeframe or at all, that our internal control over financial reporting is effective as required by SOX Section 404. If we identify one or more material weaknesses, it could result in an adverse reaction in the financial markets due to a loss of confidence in the reliability of our financial statements.

We do not intend to pay dividends on our common stock so any returns will be limited to the value of our stock.

We currently anticipate that we will retain future earnings for the development, operation and expansion of our business and do not anticipate declaring or paying any cash dividends for the foreseeable future. Any return to stockholders will therefore be limited to the appreciation of their stock, which may never occur.

Anti-takeover provisions under our charter documents and Delaware law could delay or prevent a change of control which could limit the market price of our common stock and may prevent or frustrate attempts by our stockholders to replace or remove our current management.

Our amended and restated certificate of incorporation and amended and restated bylaws contain provisions that could delay or prevent a change of control of our company or changes in our board of directors that our stockholders might consider favorable. Some of these provisions include:

111

Table of Contents

In addition, because we are incorporated in Delaware, we are governed by the provisions of Section 203 of the Delaware General Corporate Law, which may prohibit certain business combinations with stockholders owning 15% or more of our outstanding voting stock. These anti-takeover provisions and other provisions in our amended and restated certificate of incorporation and amended and restated bylaws could make it more difficult for stockholders or potential acquirors to obtain control of our board of directors or initiate actions that are opposed by the then-current board of directors and could also delay or impede a merger, tender offer or proxy contest involving our company. These provisions could also discourage proxy contests and make it more difficult for you and other stockholders to elect directors of your choosing or cause us to take other corporate actions you desire. Any delay or prevention of a change of control transaction or changes in our board of directors could cause the market price of our common stock to decline.

Our amended and restated bylaws designate the Court of Chancery of the State of Delaware as the exclusive forum for substantially all disputes between us and our stockholders, which could limit our stockholders’ ability to obtain a favorable judicial forum for disputes with us.

Our amended and restated bylaws provide that, unless we consent in writing to an alternative forum, the Court of Chancery of the State of Delaware will be the sole and exclusive forum for state law claims for (i) any derivative action or proceeding brought on our behalf, (ii) any action asserting a claim of breach of a fiduciary duty owed by any of our current or former directors, officers and employees to us or our stockholders, (iii) any action asserting a claim against us or any of our current or former directors, officers, or other employees or stockholders arising pursuant to any provision of the Delaware General Corporation Law, our certificate of incorporation or our bylaws, (iv) any action to interpret, apply, enforce or determine the validity of our certificate of incorporation or our bylaws, or (v) any action asserting a claim against us or any of our current or former directors or officers or other employees that is governed by the internal affairs doctrine, in each case subject to the Court of Chancery having personal jurisdiction over the indispensable parties named as defendants therein. This choice of forum provision may limit a stockholder’s ability to bring a claim in a judicial forum that it finds favorable for disputes with us or our directors, officers or employees, which may discourage such lawsuits against us and our directors, officers and employees even though an action, if successful, might benefit our stockholders. Stockholders who do bring a claim in the Court of Chancery could face additional litigation costs in pursuing any such claim, particularly if they do not reside in or near the jurisdiction. The Court of Chancery may also reach different judgments or results than would other courts, including courts where a stockholder considering an action may be located or would otherwise choose to bring the action, and such judgments or results may be more favorable to us than to our stockholders. Alternatively, if a court were to find this provision of our amended and restated certificate of incorporation or amended and restated bylaws inapplicable to, or unenforceable in respect of, one

112

Table of Contents

or more of the specified types of actions or proceedings, we may incur additional costs, which could have a material adverse effect on our business, financial condition or results of operation.

Our disclosure controls and procedures may not prevent or detect all errors or acts of fraud.

Upon the closing of our initial public offering in April 2019, we became subject to the periodic reporting requirements of the Exchange Act. We are continuing to refine our disclosure controls and procedures to provide reasonable assurance that information we must disclose in reports we file or submit under the Exchange Act is accumulated and communicated to management, and recorded, processed, summarized and reported within the time periods specified in the rules and forms of the SEC. We believe that any disclosure controls and procedures, no matter how well-conceived and operated, can provide only reasonable, not absolute, assurance that the objectives of the control system are met.

These inherent limitations include the realities that judgments in decision-making can be faulty, and that breakdowns can occur because of simple error or mistake. Additionally, controls can be circumvented by the individual acts of some persons, by collusion of two or more people or by an unauthorized override of the controls. Accordingly, because of the inherent limitations in our control system, misstatements due to error or fraud may occur and not be detected.

If we fail to maintain proper and effective internal control over financial reporting, our ability to produce accurate and timely financial statements could be impaired, investors may lose confidence in our financial reporting and the trading price of our common stock may decline.

Pursuant to Section 404 of Sarbanes-Oxley, our management is required to report upon the effectiveness of our internal control over financial reporting. When we lose our status as an “emerging growth company” and if we do not qualify as a “smaller reporting company” at such time, our independent registered public accounting firm will be required to attest to the effectiveness of our internal control over financial reporting. The rules governing the standards that must be met for management to assess our internal control over financial reporting are complex and require significant documentation, testing and possible remediation. To comply with the requirements of being a reporting company under the Exchange Act, we will need to implement additional financial and management controls, reporting systems and procedures and hire additional accounting and finance staff.

Any failure to maintain internal control over financial reporting could severely inhibit our ability to accurately report our financial condition, results of operations or cash flows. If we are unable to conclude that our internal control over financial reporting is effective, or if our independent registered public accounting firm determines we have a material weakness or significant deficiency in our internal control over financial reporting, investors may lose confidence in the accuracy and completeness of our financial reports, the market price of our common stock could decline, and we could be subject to sanctions or investigations by Nasdaq, the SEC or other regulatory authorities. Failure to remedy any material weakness in our internal control over financial reporting, or to implement or maintain other effective control systems required of public companies, could also restrict our future access to the capital markets.

​

General Risks

​

Adverse developments affecting the financial services industry, such as actual events or concerns involving liquidity, defaults, or non-performance by financial institutions or transactional counterparties, could adversely affect the Company’s current and projected business operations and its financial condition and results of operations.

Actual events involving limited liquidity, defaults, non-performance or other adverse developments that affect financial institutions, transactional counterparties or other companies in the financial services industry or the financial services industry generally, or concerns or rumors about any events of these kinds or other similar risks, such as the failure of Silicon Valley Bank and various regional banks in 2023, have in the past and may in the future lead to market-wide liquidity problems. If any of our lenders or counterparties to any such instruments were to be placed into receivership, we may be unable to access such funds. In addition, if any of our customers, suppliers or other parties with whom we conduct business are unable to access funds pursuant to such instruments or lending arrangements with such a

113

Table of Contents

financial institution, such parties’ ability to pay their obligations to us or to enter into new commercial arrangements requiring additional payments to us could be adversely affected.

​

Heightened inflation and increases in interest rates may increase our labor costs, costs to conduct clinical trials and other operational costs, or adversely affect our ability to obtain additional funding on attractive terms.

Although inflation has not had a material impact on our business or operating results historically, inflation, has had, and may continue to have, an impact on the labor costs we incur to attract and retain qualified personnel, costs to conduct clinical trials and other operational costs. Inflationary costs could adversely affect our business, financial condition and results of operations. Increased interest rates may adversely affect our borrowing rate and our ability to obtain, or the terms under which we can obtain, any potential additional funding.

​

Our employees, independent contractors, consultants, commercial partners and vendors may engage in misconduct or other improper activities, including noncompliance with regulatory standards and requirements.

We are exposed to the risk of employee fraud or other illegal activity by our employees, independent contractors, consultants, commercial partners and vendors. Misconduct by these parties could include intentional, reckless and negligent conduct that fails to: comply with the regulations of the FDA and other comparable foreign regulatory bodies, provide true, complete and accurate information to the FDA and other comparable foreign regulatory bodies, comply with manufacturing standards we have established, comply with healthcare fraud and abuse laws in the United States and similar foreign fraudulent misconduct laws or report financial information or data accurately or to disclose unauthorized activities to us. If we obtain FDA approval of any of our product candidates and begin commercializing those products in the United States, our potential exposure under such laws and regulations will increase significantly, and our costs associated with compliance with such laws and regulations are also likely to increase. These laws may impact, among other things, our current activities with principal investigators and research patients, as well as proposed and future sales, marketing and education programs. In particular, the promotion, sales and marketing of healthcare items and services, as well as certain business arrangements in the healthcare industry, are subject to extensive laws designed to prevent fraud, kickbacks, self-dealing and other abusive practices. These laws and regulations may restrict or prohibit a wide range of pricing, discounting, marketing and promotion, structuring and commission(s), certain customer incentive programs and other business arrangements generally.

We have adopted a code of business conduct and ethics, but it is not always possible to identify and deter employee and other third-party misconduct, and the precautions we take to detect and prevent inappropriate conduct may not be effective in controlling unknown or unmanaged risks or losses or in protecting us from governmental investigations or other actions or lawsuits stemming from a failure to be in compliance with such laws or regulations. If any such actions are instituted against us, and we are not successful in defending ourselves or asserting our rights, those actions could have a significant impact on our business, including the imposition of civil, criminal and administrative penalties, damages, monetary fines, imprisonment, possible exclusion from participation in Medicare, Medicaid and other federal healthcare programs, additional reporting requirements and oversight if we become subject to a corporate integrity agreement or similar agreement to resolve allegations of noncompliance with these laws, contractual damages, reputational harm, diminished profits and future earnings, and curtailment of our operations, any of which could adversely affect our ability to operate our business, financial condition and results of operations.

Violations of or liabilities under environmental, health and safety laws and regulations could subject us to fines, penalties or other costs that could have a material adverse effect on the success of our business.

We are subject to numerous environmental, health and safety laws and regulations, including those governing laboratory procedures, the handling, use, storage, treatment and disposal of hazardous materials and wastes and the cleanup of contaminated sites. Our operations involve the use of potentially hazardous and flammable materials, including chemicals and biological materials. Our operations also produce hazardous waste products. We could incur substantial costs as a result of violations of or liabilities under environmental requirements in connection with our operations or property, including fines, penalties and other sanctions, investigation and cleanup costs and third-party claims. Although we generally contract with third parties for the disposal of hazardous materials and wastes from our operations, we cannot eliminate the risk of contamination or injury from these materials. In the event of contamination or

114

Table of Contents

injury resulting from our use of hazardous materials, we could be held liable for any resulting damages, and any liability could exceed our resources. Furthermore, environmental laws and regulations are complex, change frequently and have tended to become more stringent. We cannot predict the impact of changes to applicable laws and regulations and cannot be certain of our future compliance. In addition, we may incur substantial costs in order to comply with current or future environmental, health and safety laws and regulations. These current or future laws and regulations may impair our research, development or production efforts.

Although we maintain workers’ compensation insurance to cover us for costs and expenses we may incur due to injuries to our employees resulting from the use of hazardous materials, this insurance may not provide adequate coverage against potential liabilities. We do not maintain insurance for environmental liability or toxic tort claims that may be asserted against us in connection with our storage or disposal of biological, hazardous or radioactive materials.

We are subject to stringent and evolving U.S. and foreign laws, regulations and rules, contractual obligations, industry standards, policies and other obligations related to data privacy and security. Our actual or perceived failure to comply with such obligations could lead to regulatory investigations or actions; litigation (including class claims) and mass arbitration demands; fines and penalties; disruptions of our business operations; reputational harm; loss of revenue or profits; and other adverse business consequences.

In the ordinary course of business, we collect, receive, store, process, generate, use, transfer, disclose, make accessible, protect, secure, dispose of, transmit, and share (collectively, process) personal data and other sensitive information, including proprietary and confidential business data, trade secrets, intellectual property, sensitive third-party data, business plans, transactions, clinical trial data and financial information (collectively, sensitive data).

Our data processing activities subject us to numerous data privacy and security obligations, such as various laws, regulations, guidance, industry standards, external and internal privacy and security policies, contractual requirements, and other obligations relating to data privacy and security.

In the United States, federal, state, and local governments have enacted numerous data privacy and security laws, including data breach notification laws, personal data privacy laws, consumer protection laws (e.g., Section 5 of the Federal Trade Commission Act), and other similar laws (e.g., wiretapping laws). For example, the federal Health Insurance Portability and Accountability Act of 1996 (“HIPAA”), as amended by the Health Information Technology for Economic and Clinical Health Act (“HITECH”), imposes specific requirements relating to the privacy, security, and transmission of individually identifiable protected health information. For more information regarding risks associated with HIPAA, please refer to the section above that discusses risks associated with U.S. healthcare laws.

In the past few years, numerous U.S. states—including California, Virginia, Colorado, Connecticut, and Utah—have enacted comprehensive privacy laws that impose certain obligations on covered businesses, including providing specific disclosures in privacy notices and affording residents with certain rights concerning their personal data. As applicable, such rights may include the right to access, correct, or delete certain personal data, and to opt-out of certain data processing activities, such as targeted advertising, profiling, and automated decision-making. The exercise of these rights may impact our business and ability to provide our products and services. Certain states also impose stricter requirements for processing certain personal data, including sensitive information, such as conducting data privacy impact assessments. These state laws allow for statutory fines for noncompliance. For example, the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act of 2020 (“CPRA”) (collectively, “CCPA”), applies to personal data of consumers, business representatives, and employees who are California residents, and requires businesses to provide specific disclosures in privacy notices and honor requests of such individuals to exercise certain privacy rights. The CCPA provides for fines of up to $7,500 per intentional violation and allows private litigants affected by certain data breaches to recover significant statutory damages. Although there are limited exemptions for clinical trial data under the CCPA, the CCPA and other similar laws may impact (possibly significantly) our business activities depending on how it is interpreted, should we become subject to the CCPA in the future. Similar laws are being considered in several other states, as well as at the federal and local levels, and we expect more states to pass similar laws in the future. These developments may further complicate compliance efforts and increase legal risk and compliance costs for us and the third parties upon whom we rely.

115

Table of Contents

Outside the United States, an increasing number of laws, regulations, and industry standards may govern data privacy and security. For example, EU GDPR and the UK GDPR impose strict requirements for processing personal data. For example, under the GDPR, companies may face temporary or definitive bans on data processing and other corrective actions; fines of up to 20 million Euros under the EU GDPR, 17.5 million pounds sterling under the UK GDPR or, in each case, 4% of annual global revenue, whichever is greater; or private litigation related to processing of personal data brought by classes of data subjects or consumer protection organizations authorized at law to represent their interests.

We may be subject to new laws governing the privacy of consumer health data, including reproductive, sexual orientation, and gender identity privacy rights. For example, Washington’s My Health My Data Act (“MHMD”) broadly defines consumer health data, places restrictions on processing consumer health data (including imposing stringent requirements for consents), provides consumers certain rights with respect to their health data, and creates a private right of action to allow individuals to sue for violations of the law. Other states are considering and may adopt similar laws.

Our employees and personnel use generative artificial intelligence (“AI”) technologies to perform their work, and the disclosure and use of personal data in generative AI technologies is subject to various privacy laws and other privacy obligations. Governments have passed and are likely to pass additional laws regulating generative AI. Our use of this technology could result in additional compliance costs, regulatory investigations and actions, and lawsuits. If we are unable to use generative AI, it could make our business less efficient and result in competitive disadvantages.

In addition, we may be unable to transfer personal data from Europe and other jurisdictions to the United States or other countries due to data localization requirements or limitations on cross-border data flows. Europe and other jurisdictions have enacted laws requiring data to be localized or limiting the transfer of personal data to other countries. In particular, the European Economic Area (EEA) and the United Kingdom (UK) have significantly restricted the transfer of personal data to the United States and other countries whose privacy laws it generally believes are inadequate. Other jurisdictions may adopt similarly stringent interpretations of their data localization and cross-border data transfer laws. Although there are currently various mechanisms that may be used to transfer personal data from the EEA and UK to the United States in compliance with law, such as the EEA’s standard contractual clauses, the UK’s International Data Transfer Agreement / Addendum, and the EU-U.S. Data Privacy Framework and the UK extension thereto (which allows for transfers to relevant U.S.-based organizations who self-certify compliance and participate in the Framework), these mechanisms are subject to legal challenges, and there is no assurance that we can satisfy or rely on these measures to lawfully transfer personal data to the United States. If there is no lawful manner for us to transfer personal data from the EEA, the UK, or other jurisdictions to the United States, or if the requirements for a legally-compliant transfer are too onerous, we could face significant adverse consequences, including the interruption or degradation of our operations, the need to relocate part of or all of our business or data processing activities to other jurisdictions (such as Europe) at significant expense, increased exposure to regulatory actions, substantial fines and penalties, the inability to transfer data and work with partners, vendors and other third parties, and injunctions against our processing or transferring of personal data necessary to operate our business. Additionally, companies that transfer personal data out of the EEA and UK to other jurisdictions, particularly to the United States, are subject to increased scrutiny from regulators, individual litigants, and activities groups. Some EU regulators have ordered certain companies to suspend or permanently cease certain transfers of personal data out of Europe for allegedly violating the EU GDPR’s cross-border data transfer limitations.

In addition to data privacy and security laws, we are bound by other contractual obligations related to data privacy and security, and our efforts to comply with such obligations may not be successful. We also publish privacy policies, marketing materials, and other statements regarding data privacy and security and if these policies, materials, or statements are found to be deficient, lacking in transparency, deceptive, unfair, or misrepresentative of our practices, we may be subject to investigation, enforcement actions by regulators, or other adverse consequences.

Obligations related to data privacy and security (and consumers’ data privacy expectations) are quickly changing, becoming increasingly stringent, and creating uncertainty. Additionally, these obligations may be subject to differing applications and interpretations, which may be inconsistent or conflict among jurisdictions. Preparing for and complying with these obligations requires us to devote significant resources and may necessitate changes to our services, information technologies, systems, and practices and to those of any third parties that process personal data on our behalf.

116

Table of Contents

We may at times fail (or be perceived to have failed) in our efforts to comply with our data privacy and security obligations. Moreover, despite our efforts, our personnel or third parties on whom we rely may fail to comply with such obligations, which could negatively impact our business operations. If we or the third parties on which we rely fail, or are perceived to have failed, to address or comply with applicable data privacy and security obligations, we could face significant consequences, including but not limited to: government enforcement actions (e.g., investigations, fines, penalties, audits, inspections, and similar); litigation (including class-action claims) and mass arbitration demands; additional reporting requirements and/or oversight; bans on processing personal data (including clinical trial data); and orders to destroy or not use personal data. In particular, plaintiffs have become increasingly more active in bringing privacy-related claims against companies, including class claims and mass arbitration demands. Some of these claims allow for the recovery of statutory damages on a per violation basis, and, if viable, carry the potential for monumental statutory damages, depending on the volume of data and the number of violations. Any of these events could have a material adverse effect on our reputation, business, or financial condition, including but not limited to: loss of customers; inability to process personal data or to operate in certain jurisdictions; limited ability to develop or commercialize our products; expenditure of time and resources to defend any claim or inquiry; adverse publicity; or substantial changes to our business model or operations

Cybersecurity risks and the failure to maintain the security, confidentiality, integrity, and availability of our information technology systems or data, and those maintained on our behalf, could result in adverse consequences that materially affect our business, including without limitation regulatory investigations or actions, a material disruption of the development programs of our product candidates, damage to our reputation and/or subject us to costs, loss of customers or sales, fines and penalties or lawsuits.

In the ordinary course of our business, we collect and store sensitive data, and, as a result, we and the third parties upon which we rely face a variety of evolving threats that could cause security incidents. We manage and maintain our applications and data utilizing on-site systems and outsourced vendors. These applications and data encompass a wide variety of business critical information, including research and development information, commercial information and business and financial information. Because information systems, networks and other technologies are critical to many of our operating activities, shutdowns or service disruptions at our company or vendors that provide information systems, networks or other services to us pose increasing risks. Cyber-attacks, malicious internet-based activity, online and offline fraud, and other similar activities threaten the confidentiality, integrity, and availability of our sensitive data and information technology systems, and those of the third parties upon which we rely. Such threats are prevalent and continue to rise, are increasingly difficult to detect, and come from a variety of sources, including traditional computer “hackers,” threat actors, “hacktivists,” organized criminal threat actors, personnel (such as through theft or misuse), sophisticated nation states, and nation-state-supported actors. Some actors now engage and are expected to continue to engage in cyber-attacks, including without limitation nation-state actors for geopolitical reasons and in conjunction with military conflicts and defense activities. During times of war and other major conflicts, we and the third parties upon which we rely may be vulnerable to a heightened risk of these attacks, including retaliatory cyber-attacks, that could materially disrupt our systems and operations, supply chain, and ability to produce, sell and distribute our services.

We and the third parties upon which we rely are subject to a variety of evolving threats, including but not limited to computer hacking, phishing attacks and social engineering (including through deep fakes, which may be increasingly more difficult to identify as fake), supply-chain attacks, software bugs, server malfunctions, software or hardware failures, loss of data or other information technology assets, adware, attacks enhanced or facilitated by AI, ransomware, dissemination of malware, computer viruses, worms and other destructive or disruptive software, denial of service attacks and other malicious activity, credential stuffing, credential harvesting, personnel misconduct or error as well as power outages, telecommunications failures, natural disasters (including extreme weather), terrorist attacks or other similar events. In particular, severe ransomware attacks are becoming increasingly prevalent and can lead to significant interruptions in our operations, ability to provide our products or services, loss of sensitive data and income, reputational harm, and diversion of funds. Extortion payments may alleviate the negative impact of a ransomware attack, but we may be unwilling or unable to make such payments due to, for example, applicable laws or regulations prohibiting such payments. Such events could have an adverse impact on us and our business, including loss of data and damage to equipment and data. In addition, system redundancy may be ineffective or inadequate, and our disaster recovery planning may not be sufficient to cover all eventualities. If such events were to occur and cause interruptions in

117

Table of Contents

our operations, it could result in a material disruption of our development programs and our business operations, such as the loss of clinical trial data from completed or future clinical trials. Such loss could result in delays in our regulatory approval efforts and significantly increase our costs to recover or reproduce the data. In addition, we may not have adequate insurance coverage to compensate for any losses associated with such events. For example, the loss of clinical trial data for our product candidates could result in delays in our regulatory approval efforts and significantly increase our costs to recover or reproduce the lost data.

Remote work has become more common and has increased risks to our information technology systems and data, as more of our employees utilize network connections, computers, and devices outside our premises or network, including working at home, while in transit and in public locations. Additionally, future or past business transactions (such as acquisitions or integrations) could expose us to additional cybersecurity risks and vulnerabilities, as our systems could be negatively affected by vulnerabilities present in acquired or integrated entities’ systems and technologies. We may discover security issues that were not found during due diligence of such acquired or integrated entities, and it may be difficult to integrate companies into our information technology environment and security program.

We rely on third-party service providers and technologies to operate critical business systems to process sensitive information in a variety of contexts, including, without limitation the manufacture of our product candidates and to conduct clinical trials. Our ability to monitor these third parties’ information security practices is limited, and these third parties may not have adequate information security measures in place. If our third-party service providers experience a security incident or other interruption, we could experience adverse consequences, including the unauthorized access, disclosure and use of sensitive data, including information from our patient registry or other patient information, which is protected by HIPAA, and other laws. Any such access, disclosure, or other loss of information could result in legal claims or proceedings, liability under laws that protect the privacy of personal information, damage to our reputation and the further development and commercialization of our product candidates could be delayed.

In addition, our ability to obtain clinical supplies of our product candidates could be disrupted if the operations of our suppliers are affected by a man-made or natural disaster or other business interruption. Damage or extended periods of interruption to our third-party collaborators’, including Gilead’s, corporate, development or research facilities due to fire, natural disaster, power loss, communications failure, unauthorized entry or other events could cause them to cease or delay development.

As we outsource more of our information systems to vendors, engage in more electronic transactions with payors and patients, and rely more on cloud-based information systems, the related security risks will increase and we will need to expend additional resources to protect our technology and information systems. In addition, there can be no assurance that our internal information technology systems or those of our third-party contractors, or our consultants’ efforts to implement adequate security and control measures, will be sufficient to protect us against breakdowns, service disruption, data deterioration or loss in the event of a system malfunction, or prevent data from being stolen or corrupted in the event of a cyber-attack, security breach, industrial espionage attacks or insider threat attacks which could result in financial, legal, business or reputational harm.

While we have implemented security measures designed to protect against security incidents, there can be no assurance that these measures will be effective. We also take steps designed to detect, mitigate, and remediate vulnerabilities in our information systems (such as our hardware and/or software, including that of third parties upon which we rely). We may not, however, detect and remediate all such vulnerabilities including on a timely basis. Further, we may experience delays in deploying remedial measures and patches designed to address identified vulnerabilities. Vulnerabilities could be exploited and result in a security incident.

We may expend significant resources or modify our business activities to try to protect against security incidents. Additionally, certain data privacy and security obligations may require us to implement and maintain specific security measures or industry-standard or reasonable security measures to protect our information technology systems and sensitive data. Applicable data privacy and security obligations may require us to notify relevant stakeholders, including affected individuals, customers, regulators, and investors, of security incidents. Such disclosures are costly, and the disclosure or the failure to comply with such requirements could lead to adverse consequences.

118

Table of Contents

If we (or a third party upon whom we rely) experience a security incident or are perceived to have experienced a security incident, we may experience adverse consequences, such as government enforcement actions (for example, investigations, fines, penalties, audits, and inspections); additional reporting requirements and/or oversight; restrictions on processing sensitive data (including personal data); litigation (including class claims); indemnification obligations; negative publicity; reputational harm; monetary fund diversions; diversion of management attention; interruptions in our operations (including availability of data); financial loss; and other similar harms. Security incidents and attendant consequences may prevent or cause customers to stop using our services, deter new customers from using our services, and negatively impact our ability to grow and operate our business.

Our contracts may not contain limitations of liability, and even where they do, there can be no assurance that limitations of liability in our contracts are sufficient to protect us from liabilities, damages, or claims related to our data privacy and security obligations. We cannot be sure that our insurance coverage will be adequate or sufficient to protect us from or to mitigate liabilities arising out of our privacy and security practices, that such coverage will continue to be available on commercially reasonable terms or at all, or that such coverage will pay future claims.

In addition to experiencing a security incident, third parties may gather, collect, or infer sensitive data about us from public sources, data brokers, or other means that reveals competitively sensitive details about our organization and could be used to undermine our competitive advantage or market position. Additionally, sensitive data of the Company or our customers could be leaked, disclosed, or revealed as a result of or in connection with our employees’, personnel’s, or vendors’ use of generative AI technologies.

​

Item 1B.  Unresolved Staff Comments

​

None.

​

Item 1C.  Cybersecurity

​

Cybersecurity Risk Management and Strategy

We have implemented and maintain various cybersecurity processes, technologies, and controls to aid in our efforts to assess, identify, and manage material risks from cybersecurity threats to our critical computer networks, third party hosted services, communications systems, hardware and software, and our critical data, including intellectual property, confidential information that is proprietary, strategic or competitive in nature, and clinical trial data (“Information Systems and Data”).

Our cybersecurity function, led by our Head of DevSecOps and supported by our Head of IT and third-party service providers, identifies and assesses risks from cybersecurity threats by monitoring and evaluating our threat environment using various methods including, for example: maintaining manual and automated tools, subscribing to reports and services that identify cybersecurity threats, conducting scans of our threat environment, evaluating our and our industry’s cybersecurity risk profile, evaluating threats reported to us, completing internal and external cybersecurity audits, completing third-party cybersecurity threat assessments, conducting vulnerability assessments, leveraging external intelligence feeds, and completing third-party red/blue team exercises and tabletop incident response exercises.

Depending on the environment, we implement and maintain technical, physical, and organizational measures, processes, standards, practices, and policies designed to manage and mitigate material risks from cybersecurity threats to our Information Systems and Data. These measures, processes, standards, practices, and policies address, for example: incident detection and response, risk assessments, security certifications, encryption, network security controls, data segregation, access controls, physical security, asset management (such as tracking and disposal), systems monitoring, employee cybersecurity awareness training, and systems monitoring. We also have cybersecurity insurance.

Our process for identifying and assessing material risks from cybersecurity threats operates alongside our broader overall enterprise risk assessment process. We have a cybersecurity-specific risk assessment process designed to

119

Table of Contents

assess identified material risks from cybersecurity threats. This process is designed to help us manage our material risks from cybersecurity threats and protect against, detect, and respond to cybersecurity incidents.

We use third-party service providers to assist us from time to time to identify, assess, and manage material risks from cybersecurity threats, including for example cybersecurity software providers and cybersecurity consultants that provide threat intelligence, managed cybersecurity, forensic, and penetration testing services.

Further, we use third-party service providers to perform a variety of functions throughout our business, such as software-as-a-service providers, data hosting companies, contract research organizations, and contract manufacturing organizations. We have certain vendor management processes designed help to manage cybersecurity risks associated with our use of these providers. Depending on the nature of the services provided, the sensitivity of the Information Systems and Data at issue, and the identity of the provider, our vendor management processes may involve different levels of assessment designed to help identify cybersecurity risks associated with a provider, including, for example, security questionnaires and the imposition of contractual obligations related to cybersecurity on the provider.

For a description of the cybersecurity risks and related impacts that may materially affect the Company and how they may do so, see our risk factors in Part I, Item 1A of this Annual Report on Form 10-K, including “Cybersecurity risks and the failure to maintain the security, confidentiality, integrity, and availability of our information technology systems or data, and those maintained on our behalf, could result in adverse consequences that materially affect our business, including without limitation regulatory investigations or actions, a material disruption of the development programs of our product candidates, damage to our reputation and/or subject us to costs, loss of customers or sales, fines and penalties or lawsuits.”

Cybersecurity Governance

Our Board of Directors addresses the Company’s cybersecurity risk management as part of its general oversight function. Our Audit Committee is responsible for the oversight of risks from cybersecurity threats and data breaches. On a quarterly basis, the Audit Committee receives an overview from our Head of IT regarding our cybersecurity threat risk management and strategy processes, which may include, for example, covering topics such as data security posture, results from third-party assessments, our incident response plan, and material cybersecurity threat risks or incidents and developments, as well as the steps management has taken to respond to such risks. The Chair of the Audit Committee periodically updates our Board of Directors on its oversight of cybersecurity and data breach risk management and strategies.

Our executive management team, with regulatory and governance oversight from our Audit Committee, are responsible for hiring appropriate personnel, helping to integrate cybersecurity risk considerations into the Company’s overall risk management strategy, and communicating key priorities to relevant personnel. Our Digital and IT Steering Committee is responsible for approving budgets, helping prepare for cybersecurity incidents, approving cybersecurity processes, and reviewing security assessments and other security-related reports.

Our cybersecurity function, led by our Head of DevSecOps and supported by our Head of IT and third-party service providers, is responsible for our cybersecurity risk management and strategy processes. Our Head of IT, who is a Certified Information Security Manager (CISM ISACA) and a Certified Information Systems Auditor (CISA ISACA), and our Head of DevSecOps, collectively have significant prior work experience in various roles involving managing information security, developing cybersecurity strategy and implementing effective information and cybersecurity programs.

Our cybersecurity incident response plan provides for escalation of certain cybersecurity incidents to members of management depending on the circumstances, including our CFO, COO, and CEO. Management works with the Company’s incident response team to help the Company mitigate and remediate cybersecurity incidents of which they are notified. Our incident response team also reports material cybersecurity incidents to the Chair of the Audit Committee.

​

120

Table of Contents

Item 2.  Properties

Our principal executive offices are located in New York, New York, pursuant to a lease that expires in August 2026. Our European research and preclinical development operations are located in Vienna, Austria, where we lease and occupy approximately 30,681 square feet of office and laboratory space. Our first facility is leased pursuant to two operating leases, comprised of (i) a lease of unlimited duration for approximately 15,239 square feet of office and laboratory space and (ii) a lease set to expire in September 2028 and with no option to extend for approximately 2,367 square feet of storage space. In 2019, we entered into a lease for a second facility located in Vienna, Austria that is set to expire in February 2029, where we occupy approximately 15,440 square feet of office and laboratory space. In May 2021 we purchased a parcel of land in the north of Vienna and have received building permission to build a GMP manufacturing plant of approximately 48,440 square feet. In January 2024 our Board decided to implement a Restructuring Plan, which included the discontinuation of the GMP manufacturing project and the divestment of all associated assets, including the parcel of land. Strategic considerations preceding the adoption of the Restructuring Plan resulted in the impairment of the full carrying value of the GMP manufacturing facility project in the year ended December 31, 2023. We believe that our current facilities are adequate to meet our ongoing needs, and that, if we require additional space, we will be able to obtain additional facilities on commercially reasonable terms.

​

PART II—OTHER INFORMATION

Item 3.  Legal Proceedings.

In April 2021, a third party opposed European Patent No. 3218504 (the “EP ’504 Patent”) which was granted to the University of Geneva in July 2020 and is exclusively licensed to us. The patent is directed to our replicating arenavirus platform technology and is part of our strategy to protect current product candidates based on this platform technology, including our lead oncology product candidate HB-200. In a decision that has become final, the Opposition Division of the European Patent Office (“EPO”) dismissed the opposition in an oral proceeding on May 9, 2023, and maintained the patent as granted.

From time to time, we may become involved in other litigation or legal proceedings relating to claims arising from the ordinary course of business.

​

Item 4.  Mine Safety Disclosures.

Not applicable.

​

PART II

Item 5.  Market for Registrant's Common Equity, Related Stockholder Matters and Issuer Purchases of Equity Securities

Certain Information Regarding the Trading of Our Common Stock

Our common stock trades under the symbol “HOOK” on The Nasdaq Capital Market and has been publicly traded since April 18, 2019. Prior to this time, there was no public market for our common stock.

Holders of Our Common Stock

As of March 22, 2024, there were four holders of record of shares of our common stock, which does not include stockholders for whom shares are held in “nominee” or “street” name, and two holders of record of shares of our Class A common stock.

Dividends

121

Table of Contents

We have not paid any cash dividends on our common stock since inception and do not anticipate paying cash dividends in the foreseeable future.

Securities Authorized for Issuance Under Equity Compensation Plans

The information required by Item 5 of Form 10-K regarding equity compensation plans is incorporated herein by reference to Item 12 of Part II of this Annual Report.

Recent Sales of Unregistered Securities

None.

Issuer Purchases of Equity Securities by the Issuer and Affiliated Purchasers

None.

Item 6.  [Reserved]

​

Item 7.  Management’s Discussion and Analysis of Financial Condition and Results of Operations

The following discussion and analysis of our financial condition and results of operations should be read in conjunction with our consolidated financial statements and related notes appearing at the end of this Annual Report on Form 10-K. Some of the information contained in this discussion and analysis or set forth elsewhere in this Annual Report on Form 10-K, including information with respect to our plans and strategy for our business, includes forward-looking statements that involve risks and uncertainties. As a result of many factors, including those factors set forth in the “Risk Factors” section of this Annual Report on Form 10-K, our actual results could differ materially from the results described in, or implied by, the forward-looking statements contained in the following discussion and analysis.

Overview

We are a clinical-stage biopharmaceutical company developing a new class of immunotherapeutics based on our proprietary arenavirus platform that is designed to target and amplify T cell and immune responses to fight diseases. Our replicating and non-replicating technologies are engineered to induce robust and durable antigen-specific CD8+ T cell responses and pathogen-neutralizing antibodies. We believe that our technologies can meaningfully leverage the human immune system for prophylactic and therapeutic purposes by inducing CD8+ T cell response levels previously not achieved by other immune therapy approaches.

We are building a proprietary immuno-oncology pipeline utilizing our replicating technology. Our oncology portfolio targets oncoviral cancer antigens and next-generation antigens and includes two primary programs in development: HB-200 and HB-700. HB-200 is in clinical development for the treatment of Human Papillomavirus 16-positive (“HPV16+”) head and neck cancers in a Phase 1/2 clinical trial. HB-700, which has been partnered with F. Hoffmann-La Roche Ltd. and Hoffmann-La Roche Inc. (collectively referred to as “Roche”), is in preclinical development for the treatment of KRAS mutated cancers, including, lung, colorectal and pancreatic cancers. Our third oncology program, HB-300, targeting self-antigens for the treatment of prostate cancer, was paused for further development in January 2024.

Our strategic priority is the development of our oncology portfolio, most importantly the advancement of our HB-200 program, and we expect to initiate a randomized Phase 2/3 trial in 2024. Additionally, we are developing infectious disease therapies in partnership with other companies. Our Hepatitis B (“HBV”) program, HB-400, and our Human Immunodeficiency Virus (“HIV”) program, HB-500, are developed in a partnership with Gilead Sciences Inc. (“Gilead”).

122

Table of Contents

2023 Highlights

In 2023, we executed on several key areas across our pipeline. The highlights include:

Oncology:

Infectious Disease: Gilead-Partnered Programs

We have funded our operations to date primarily from public offerings of common stock and convertible preferred stock, including our initial public offering, as well as private placements of our redeemable convertible preferred stock, grant funding and loans from an Austrian government agency, and upfront, milestone and initiation payments from Gilead and Roche in connection with our respective collaboration and license agreements.

We do not expect to generate revenue from any product candidates that we develop until we obtain regulatory approval for one or more of such product candidates, if at all, and commercialize our products or enter into additional collaboration agreements with third parties. Substantially all of our net losses have resulted from costs incurred in connection with our research and development programs and from general and administrative costs associated with our operations.

123

Table of Contents

All of our product candidates, including our most advanced oncology product candidate, HB-200, will require substantial additional development time and resources before we would be able to apply for and receive regulatory approvals and begin generating revenue from product sales. Before launching our first products, if approved, we plan to establish our own manufacturing facility to reduce or eliminate our reliance on contract manufacturing organizations (“CMOs”) which will require substantial capital expenditures and cause additional operating expenses. We currently have no marketing and sales organization and have no experience in marketing products; accordingly, we will incur significant expenses to develop a marketing organization and sales force in advance of generating any commercial product sales. As a result, we will need substantial additional capital to support our operating activities. In addition, we expect to continue to incur legal, accounting and other expenses in operating our business, including the costs associated with operating as a public company.

We currently anticipate that we will seek to fund our operations through equity or debt financings or other sources, such as government grants and additional collaboration agreements with third parties. Adequate funding may not be available to us on acceptable terms, or at all. If sufficient funds on acceptable terms are not available when needed, we will be required to significantly reduce our operating expenses and delay, reduce the scope of, or eliminate one or more of our development programs.

On January 29, 2024, we announced our decision to prioritize the clinical development of our HB-200 program for the treatment of HPV16+ head and neck cancers and our two Gilead-partnered infectious disease programs and to pause development activities related to HB-300 and most of our preclinical research activities. In connection with this strategic refocus, our Board of Directors approved a plan to reduce our workforce by 55 fulltime employees, or approximately 30% of the then-current employee base, and to rebalance our cost structure in alignment with the new prioritization of research and development programs. The prioritization of our HB-200 program and our two Gilead-partnered programs also includes the discontinuation of our GMP manufacturing facility project. We expect the restructuring to be implemented and substantially completed by the end of the first quarter of 2024. In connection with the Restructuring Plan, we estimate that we will incur cash charges of approximately $1.6 million for severance and other personnel and restructuring related costs.

We also announced in January 2024 that we received notification from Roche of their decision to terminate the collaboration and licensing agreement for our HB-700 program in KRAS mutated cancers. We have met all go-forward criteria under the agreement and remain eligible for a final milestone payment associated with an IND submission. Effective April 25, 2024, we will regain full control of the associated intellectual property portfolio and have full collaboration and licensing rights for this program.

We have incurred net losses each year since our inception in 2011, including net losses of $81.6 million for the year ended December 31, 2023 and $64.9 million for the year ended December 31, 2022. As of December 31, 2023, we had an accumulated deficit of $369.3 million and we do not expect positive cash flows from operations in the foreseeable future, if ever. We expect to continue to incur net operating losses for at least the next several years as we advance our product candidates through clinical development, seek regulatory approval, prepare for and, if approved, proceed to commercialization, continue our research and development efforts and invest to establish further commercial manufacturing capacity.

We believe that our cash and cash equivalents, will enable us to fund our operating expenses and capital expenditure requirements at least through the next 12 months from the issuance date of the consolidated financial statement. See “—Liquidity and Capital Resources.”

Impacts of Coronavirus and Market Conditions on Our Business

We have been actively monitoring the coronavirus pandemic situation and its impact globally. We believe our financial results for the years ended December 31, 2023, 2022 and 2021 were not significantly impacted by any lingering effects of the recent coronavirus pandemic. Further, disruption of global financial markets and a recession or market correction, including as a result of any resurgence of the coronavirus pandemic, the ongoing military conflict between Russia and Ukraine and the related sanctions imposed against Russia, any escalation of the conflict in Israel and the

124

Table of Contents

Gaza Strip, and other global macroeconomic factors, could reduce our ability to access capital, which could, in the future, negatively affect our business and the value of our common stock.

Effects of Inflation

We do not believe that inflation has had a material impact on our business or operating results during the periods presented. However, inflation, has had, and may continue to have, an impact on the labor costs we incur to attract and retain qualified personnel, costs to conduct clinical trials and other operational costs. Inflationary costs could adversely affect our business, financial condition and results of operations. In addition, increased inflation has had, and may continue to have, an effect on interest rates. Increased interest rates may adversely affect our borrowing rate and our ability to obtain, or the terms under which we can obtain, any potential additional funding.

Components of Our Results of Operations

Revenue from collaboration and licensing

To date, we have not generated any revenue from product sales and do not expect to do so in the near future, if at all. All of our revenue to date has been derived from research collaboration and license agreements with Gilead and Roche.

Gilead Collaboration Agreement

On June 4, 2018, we entered into the Gilead Collaboration Agreement to evaluate potential vaccine products using or incorporating our replicating technology and non-replicating technology for the treatment, cure, diagnosis or prevention of HBV and HIV.

Under the Gilead Collaboration Agreement, we granted Gilead an exclusive, royalty-bearing license to our technology platform for researching, developing, manufacturing and commercializing products for HIV or HBV. We received a non-refundable $10.0 million upfront payment upon entering the Gilead Collaboration Agreement. In February 2022, we signed an amended and restated collaboration agreement (the “Restated Gilead Collaboration Agreement”) which revised the terms only for the HIV program, whereby we will take on development responsibilities for the HIV program candidate through a Phase 1b clinical trial. Pursuant to the Restated Gilead Collaboration Agreement, Gilead will retain an exclusive right, the Option, to take back the development responsibilities, thus keeping the rights for the HIV program, including further development and commercialization in return for an option exercise payment of $10.0 million. Pursuant to the Restated Gilead Collaboration Agreement, we are eligible for up to $140.0 million in developmental milestone payments for the HBV program and $50.0 million in commercialization milestone payments. If Gilead exercises the Option, we are eligible for up to $172.5 million in developmental milestone payments for the HIV program, inclusive of the $10.0 million Option exercise payment, and $65.0 million in commercialization milestone payments for the HIV program. Upon the commercialization of a product, we are eligible to receive tiered royalties of a high single-digit to mid-teens percentage on the worldwide net sales of each HBV product, and royalties of a mid-single-digit to 10% of worldwide net sales of each HIV product. Gilead is obligated to reimburse us for our costs, including all benefits, travel, overhead, and any other expenses, relating to performing research and development activities under the Restated Gilead Collaboration Agreement with respect to the HBV program, and if the Option is exercised, any manufacturing costs related to the HIV program. Through December 31, 2023, we have received a non-refundable upfront payment of $10.0 million, a program initiation fee of $15.0 million and $21.2 million in milestone payments for the achievement of pre-clinical research milestones from Gilead. In addition, we have recognized $42.2 million of cost reimbursements for research and development services performed under the Restated Gilead Collaboration Agreement.

We determined that our performance obligations under the terms of the original Gilead Collaboration Agreement included one combined performance obligation for each of the HBV and HIV research programs, comprised of the transfer of intellectual property rights and providing research and development services. Accordingly, we recognized these amounts as revenue over the performance period of the respective services on a percent of completion basis using total estimated research and development labor hours for each of the performance obligations. The terms of

125

Table of Contents

the Restated Gilead Collaboration Agreement added an additional performance obligation to us to perform research and development work for the HIV program. We recognize the amounts of revenue allocated to the performance obligation resulting from the Restated Gilead Collaboration Agreement on a percent of completion basis over the performance period, using total estimated research and development costs as the measure of progress.

Roche Collaboration Agreement

On October 18, 2022, we entered into the Roche Collaboration Agreement to (i) grant Roche an exclusive license to research, develop, manufacture and commercialize our pre-clinical HB-700 cancer program, an arenaviral immunotherapeutic for KRAS-mutated cancers, and (ii) grant Roche an exclusive option right to exclusively license for research, development manufacturing and commercialization, a second, novel arenaviral immunotherapeutic program targeting undisclosed cancer antigens. In January 2024, Roche provided us with written notice of the termination of the collaboration and licensing agreement.

Under the terms of the terminated Roche Collaboration Agreement, we granted Roche an exclusive, royalty-bearing license to our technology platforms for KRAS-mutated cancers, and an option right to exclusively license a second, novel arenaviral immunotherapeutic program targeting undisclosed cancer antigens. Pursuant to the terms of the Roche Collaboration Agreement, following the termination notice, the Roche Collaboration Agreement will be terminated on April 25, 2024. We remain eligible for a final milestone payment associated with an IND submission. Effective April 25, 2024, we will regain full control of the associated intellectual property portfolio and will have full collaboration and licensing rights for the KRAS program.

Through December 31, 2023, we have received from Roche the non-refundable upfront payment of $25.0 million and $10.0 million in milestone payments for the achievement of a GMP manufacturing milestone under the HB-700 program. In addition, we have recognized $0.5 million of cost reimbursements for research and development activities related to a first human trial.

We determined that our performance obligations under the terms of the Roche Collaboration Agreement included one combined performance obligation for the transfer of intellectual property rights (licenses) and providing research and development services for the HB-700 program, and a second, separate performance obligation during the UCA Option period to perform research and development services with respect to the UCA Program. Accordingly, we allocated the non-refundable upfront payment of $25.0 million between the two performance obligations. Milestone payments that are contingent on future events will be added to the transaction price when the triggering event has become probable. The consideration allocated to a performance obligation has been recognized as revenue over the performance period of the respective services on a percent of completion basis using total estimated research and development costs for each of the performance obligations. Milestone payments, or parts thereof, that relate to completed services will be reflected via a cumulative catch up for past performance.

At December 31, 2023, $26.8 million of non-refundable upfront and milestone payments received from Roche were still recorded as deferred revenue and will be early recognized as revenue as a result of the termination in the first half of 2024.

Operating Expenses

Our operating expenses since inception have only consisted of research and development costs and general administrative costs.

Research and Development Expenses

Since our inception, we have focused significant resources on our research and development activities, including establishing our arenavirus platform, conducting preclinical studies, developing a manufacturing process, conducting Phase 1 and Phase 2 clinical trials, including the ongoing HB-200 Phase 1/2 trial, and progressing investigational new drug (“IND”) applications, including for HB-500 and HB-700. Research and development activities

126

Table of Contents

account for a significant portion of our operating expenses. Research and development costs are expensed as incurred. These costs include:

The majority of our research and development costs are external costs, which we track on a program-by-program basis. We do not track our internal research and development expenses on a program-by-program basis as they primarily relate to shared costs deployed across multiple projects under development.

We expect our research and development expenses to increase substantially in the future as we advance our existing and future product candidates into and through clinical trials and pursue regulatory approval. The process of conducting the necessary clinical studies to obtain regulatory approval is costly and time-consuming. Clinical trials generally become larger and more costly to conduct as they advance into later stages and, in the future, we will be required to make estimates for expense accruals related to clinical trial expenses.

At this time, we cannot reasonably estimate or know the nature, timing and estimated costs of the efforts that will be necessary to complete the development of any product candidates that we develop from our programs. We are also unable to predict when, if ever, material net cash inflows will commence from sales of product candidates we develop, if at all. This is due to the numerous risks and uncertainties associated with developing product candidates, including the uncertainty of:

127

Table of Contents

A change in the outcome of any of these variables with respect to the development of a product candidate could mean a significant change in the costs and timing associated with the development of that product candidate. For example, if the FDA or another regulatory authority were to require us to conduct clinical trials beyond those that we anticipate will be required for the completion of clinical development of a product candidate, or if we experience significant delays in our clinical trials due to patient enrollment or other reasons, we would be required to expend significant additional financial resources and time on the completion of clinical development.

​

128

Table of Contents

The following table summarizes our research and development expenses by product candidate or program (in thousands):

​

Other unallocated research and development expenses include stock-based compensation expense, certain lease expenses and other operating expenses that we do not track on a program-by-program basis, since our research and development employees and infrastructure resources are utilized across our programs.

General and Administrative Expenses

Our general and administrative expenses consist primarily of personnel costs in our executive, finance and investor relations, business development and administrative functions. Other general and administrative expenses include consulting fees and professional service fees for auditing, tax and legal services, lease expenses related to our offices, premiums for directors and officers liability insurance, intellectual property costs incurred in connection with filing and prosecuting patent applications, depreciation and other costs. We expect our general and administrative expenses to continue to increase in the future as we expand our operating activities and prepare for potential commercialization of our current and future product candidates, increase our headcount and investor relations activities and maintain compliance with requirements of the Nasdaq Capital Market and the Securities and Exchange Commission.

Impairment Expenses

Impairment expenses consist of non-cash impairment charges relating to long-lived assets. Impairments are determined using management’s judgment about the anticipated performance of our business in relation to expectations, significant negative technological, scientific or economic trends and significant changes or planned changes in the use of the assets and their effects based on information available as of the date of these consolidated financial statements. Management disposes of fixed assets during the regular course of business due to damage, obsolescence, strategic shifts, and loss.

Long-lived assets are reviewed for impairment whenever events or changes in circumstances indicate that the carrying amount of an asset group may not be recoverable. Recoverability of assets to be held and used is measured by a comparison of the carrying amount of an asset group to future undiscounted net cash flows expected to be generated by the assets. If the carrying amount of an asset group exceeds its estimated undiscounted net future cash flows, an impairment charge is recognized for the amount by which the carrying amount of the asset group exceeds its fair value.

Grant Income

Since inception, we have received grants from the Austrian Research Promotions Agency, either under funding agreements or under research incentive programs. In addition, we have received loans under funding agreements that bear interest at below market interest rate. We account for the grants received as other income and for the imputed benefits arising from the difference between a market rate of interest and the rate of interest as additional grant income, and record interest expense for the loans at a market rate of interest.

We participate in a research incentive program provided by the Austrian government under which we are entitled to reimbursement of a percentage of qualifying research and development expenses and capital expenditures incurred in Austria. Submissions for reimbursement under the program are submitted annually. Incentive amounts are

129

Table of Contents

generally paid out during the calendar year that follows the year of the expenses but remain subject to subsequent examinations by the responsible authority.

Furthermore, we participated in the life sciences research and development program provided by the New York State government under which we were entitled to reimbursement of a percentage of qualifying research and development expenses in New York State up to $0.5 million per year for the years 2019 to 2021. Submissions for reimbursement under the program were submitted in the fourth quarter of 2023 and certificates of tax credits were received. Incentive amounts are generally paid out six to nine months after amended tax returns including a certificate of tax credit issued by Empire State Development are filed. We account for the grants received as other income.

We also participate in the New York City biotechnology tax credit program, according to which certain expenses for business in the biotechnology field in New York City limited to $0.25 million per year for three consecutive years from January 1, 2023 to December 31, 2025 are incentivized. We account for the grants received as other income.

Interest Income

Interest income results of interest earned on our cash, cash equivalents, and restricted cash.

Interest Expense

Interest expense results primarily from loans under funding agreements with the Austrian Research Promotion Agency, recorded at a market rate of interest. The difference between interest payments payable pursuant to the loans, which rates are at below market interest rates, and the market interest rate, is accounted for as grant income.

Income Taxes

Income tax expense results from U.S. federal and state income tax as well as foreign minimum income tax and profit on a legal entity basis. The losses that we have incurred since inception result primary from the losses of our Austrian subsidiary. As of December 31, 2023, we had a deferred tax asset of $94.4 million primarily resulting from foreign net operating loss carryforwards of $378.1 million with no expiry date. We have considered that, at this point in time, it is uncertain whether we will ever be able to realize the benefits of the deferred tax asset, and accordingly, have established a full valuation allowance as of December 31, 2023.

Results of Operations

Comparison of Years Ended December 31, 2023 and 2022

The following table summarizes our results of operations for the years ended December 31, 2023 and 2022 (in thousands). Discussions of 2021 items and year-to-year comparisons between 2022 and 2021 that are not included in this Annual Report on Form 10-K can be found in “Management’s Discussion and Analysis of Financial Condition and

130

Table of Contents

Results of Operations” Part II, Item 7 of our Annual Report on Form 10-K for the fiscal year ended December 31, 2022 filed with the SEC on March 15, 2023.

​